Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
This report summarizes scanner evidence for trailofbits/skills, a Python project with 7,477 GitHub stars. SynthScan examined 201,571 lines of code across 1263 source files, recording 2107 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 14.9 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1636 finding(s).
Are imports declared and package/API names verified? 153 finding(s).
Are wrappers, guards, and repeated structures necessary? 1475 finding(s).
Which changes need focused human review? 2107 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 2107 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/dwarf-expert/tests/test_skill_contract.py | 123 | def test_documented_dwarfdump_flags_are_real(): | CODE |
| LOW | plugins/dwarf-expert/tests/test_skill_contract.py | 156 | def test_body_sections_are_fence_aware(): | CODE |
| LOW | plugins/dwarf-expert/tests/test_skill_contract.py | 174 | def test_frontmatter_contract(): | CODE |
| LOW | …ills/interpreting-culture-index/scripts/extract_pdf.py | 133 | def print_verification_summary(data: dict) -> None: | CODE |
| LOW | …ulture-index/scripts/culture_index/opencv_extractor.py | 85 | def clear_extraction_warnings() -> None: | CODE |
| LOW | …ulture-index/scripts/culture_index/opencv_extractor.py | 127 | def _extract_text_from_region(img_rgb: np.ndarray, region: tuple[int, int, int, int]) -> str: | CODE |
| LOW | …ulture-index/scripts/culture_index/opencv_extractor.py | 242 | def _parse_name_from_filename(stem: str) -> str: | CODE |
| LOW | …preting-culture-index/scripts/culture_index/extract.py | 24 | def calculate_energy_utilization(survey_eu: int, job_eu: int) -> tuple[int, str]: | CODE |
| LOW | …w-walkthrough/evals/rate-limit-walkthrough/scaffold.sh | 176 | def test_allows_burst_up_to_capacity(): | CODE |
| LOW | …w-walkthrough/evals/rate-limit-walkthrough/scaffold.sh | 184 | def test_rejects_invalid_config(): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 70 | def test_real_patch_covers_deletion_rename_binary_and_quoted_paths(repo): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 87 | def test_step_order_can_change_without_changing_any_diff(repo): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 100 | def test_rejects_incomplete_or_fabricated_diff(repo, mutation): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 120 | def test_deleted_and_added_line_anchors_preserve_side(changed, side): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 128 | def test_context_anchor_preserves_requested_side(changed, side): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 147 | def test_rejects_invalid_or_ambiguous_anchors(changed, anchor): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 154 | def test_anchor_cannot_span_separate_hunks(repo): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 165 | def test_safe_embedding_preserves_script_tags_and_placeholder_words(changed): | CODE |
| LOW⚡ | …ns/review-walkthrough/tests/test_render_walkthrough.py | 189 | def test_rejects_empty_or_wrong_input(changed, value): | CODE |
| LOW⚡ | …ns/review-walkthrough/tests/test_render_walkthrough.py | 198 | def test_rejects_invalid_pr_metadata(changed, field, value): | CODE |
| LOW⚡ | …ns/review-walkthrough/tests/test_render_walkthrough.py | 206 | def test_cli_writes_output_and_keeps_existing_output_on_bad_input(tmp_path, changed): | CODE |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 233 | def test_rejects_malformed_patch_and_missing_template_slots(changed): | CODE |
| LOW | plugins/review-walkthrough/tests/test_eval_graders.py | 122 | def test_graders_accept_complete_rendered_artifact(tmp_path, fixture_data, empty_file_first): | CODE |
| LOW | plugins/review-walkthrough/tests/test_eval_graders.py | 135 | def test_graders_allow_definitions_and_consumers_in_one_step(tmp_path, fixture_data): | CODE |
| LOW | plugins/review-walkthrough/tests/test_eval_graders.py | 160 | def test_each_grader_rejects_its_defect(tmp_path, fixture_data, defect, grader): | CODE |
| LOW | plugins/review-walkthrough/tests/test_eval_graders.py | 182 | def test_graders_reject_empty_artifact_and_fail_on_missing_artifact(tmp_path): | CODE |
| LOW | …roize-audit/skills/zeroize-audit/tools/generate_poc.py | 149 | def _extract_function_signature(src_file: str, line: int) -> str | None: | CODE |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 213 | def check_path_has_sensitive_var(self, path: list[str]) -> bool: | CODE |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 253 | def verify_wipe_dominates_exits(self) -> dict: | CODE |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 245 | def detect_loop_unrolled_wipes(self, func: Function) -> list[dict]: | CODE |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 293 | def _are_sequential_addresses(self, addresses: list[str]) -> bool: | CODE |
| LOW⚡ | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 147 | def detect_drop_before_storagedead( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 116 | def local_names_from_debug_info(fn_lines: list[str]) -> dict[str, str]: | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 208 | def detect_resume_with_live_secrets( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 245 | def detect_aggregate_move_non_zeroizing( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 281 | def detect_closure_capture_secret( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 318 | def detect_drop_glue_without_zeroize( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 347 | def detect_ffi_call_with_secret( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 396 | def detect_yield_with_live_secret( | CODE |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 434 | def detect_result_err_path_with_secret( | CODE |
| LOW⚡ | …lls/zeroize-audit/tools/scripts/check_llvm_patterns.py | 85 | def extract_volatile_stores_by_target(ir_text: str) -> dict[str, int]: | CODE |
| LOW | …lls/zeroize-audit/tools/scripts/check_llvm_patterns.py | 118 | def extract_volatile_store_targets(ir_text: str) -> set[str]: | CODE |
| LOW | …lls/zeroize-audit/tools/scripts/check_llvm_patterns.py | 162 | def find_secret_aggregate_passes(ir_text: str) -> list[tuple[int, str]]: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 147 | def _confidence_from_evidence_strength(evidence_strength: list[str]) -> str: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 535 | def _manifest_has_zeroize_dep(manifest: dict) -> bool: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 587 | def _zeroed_field_names_in_drop( | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 607 | def _extract_drop_body_from_impl(drop_impl: dict, index: dict) -> str: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 646 | def _zeroed_field_names_in_text(text: str, field_names: list[str]) -> set[str]: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 707 | def _find_from_into_non_zeroizing(item: dict, index: dict) -> list[tuple[str, list[str]]]: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 862 | def _has_write_bytes_without_compiler_fence(source_file: str | None) -> bool: | CODE |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 872 | def _has_cfg_feature_on_cleanup(item: dict, index: dict) -> bool: | CODE |
| LOW⚡ | plugins/c-review/tests/test_workflow_args.py | 84 | def test_an_args_object_is_accepted(tmp_path): | CODE |
| LOW⚡ | plugins/c-review/tests/test_workflow_args.py | 89 | def test_a_json_encoded_args_string_is_accepted(tmp_path): | CODE |
| LOW⚡ | plugins/c-review/tests/test_workflow_args.py | 95 | def test_both_forms_resolve_to_identical_configuration(tmp_path): | CODE |
| LOW | plugins/c-review/tests/test_workflow_args.py | 113 | def test_bad_args_are_still_refused(literal, because, tmp_path): | CODE |
| LOW | plugins/c-review/tests/test_workflow_args.py | 132 | def test_shq_makes_a_dollar_sign_and_a_backtick_inert(tmp_path): | CODE |
| LOW | plugins/c-review/tests/test_workflow_args.py | 147 | def test_shq_survives_an_embedded_single_quote_and_a_command_substitution(tmp_path): | CODE |
| LOW | plugins/c-review/tests/test_workflow_args.py | 179 | def test_a_wrong_typed_optional_arg_is_refused_not_silently_defaulted(key, value, tmp_path): | CODE |
| LOW | plugins/c-review/tests/test_workflow_args.py | 192 | def test_an_absent_optional_arg_still_takes_its_default(tmp_path): | CODE |
| LOW | plugins/c-review/tests/test_workflow_args.py | 201 | def test_the_assignment_id_charset_refuses_everything_that_escapes(bad, tmp_path): | CODE |
| 1097 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/git-cleanup/evals/run-evals.sh | 118 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/run-evals.sh | 120 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/run-evals.sh | 189 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/run-evals.sh | 191 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 101 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 105 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 107 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 191 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 193 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 201 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 203 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 239 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 242 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | plugins/git-cleanup/evals/selftest/run-selftest.sh | 248 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 59 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 84 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 86 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 122 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 124 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 171 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 173 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 220 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/selftest/run-selftest.sh | 222 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …eting-culture-index/scripts/culture_index/constants.py | 6 | # ============================================================================= | COMMENT |
| MEDIUM | …eting-culture-index/scripts/culture_index/constants.py | 8 | # ============================================================================= | COMMENT |
| MEDIUM | …eting-culture-index/scripts/culture_index/constants.py | 94 | # ============================================================================= | COMMENT |
| MEDIUM | …eting-culture-index/scripts/culture_index/constants.py | 96 | # ============================================================================= | COMMENT |
| MEDIUM⚡ | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 128 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 130 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 139 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 141 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 175 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 177 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 192 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 194 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 211 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 213 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 224 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 226 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 275 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …ugins/zeroize-audit/tests/rust-regression/run_smoke.sh | 277 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 57 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 60 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 71 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 73 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 90 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 92 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 106 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 108 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 119 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 121 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 136 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 138 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 154 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 156 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 172 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 174 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …roize-audit/skills/zeroize-audit/tools/generate_poc.py | 43 | # --------------------------------------------------------------------------- | COMMENT |
| 209 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …it/skills/zeroize-audit/references/compile-commands.md | 107 | # Step 1: Extract build-relevant flags for the TU (as a bash array) | COMMENT |
| LOW | …it/skills/zeroize-audit/references/compile-commands.md | 114 | # Step 2: Emit IR at each level in opt_levels (always include O0 as baseline) | COMMENT |
| LOW⚡ | …it/skills/zeroize-audit/references/compile-commands.md | 127 | # Step 3: Diff across all levels — O1 is the diagnostic level for simple DSE; | COMMENT |
| LOW⚡ | …it/skills/zeroize-audit/references/compile-commands.md | 134 | # Step 4: Emit assembly at O2 for register-spill and stack-retention analysis | COMMENT |
| LOW⚡ | …it/skills/zeroize-audit/references/compile-commands.md | 139 | # Step 5: Analyze assembly output | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 58 | ### Step 1: Parse Participants and Channels | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 80 | ### Step 2: Inventory Cryptographic Operations | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 102 | ### Step 3: Declare Types, Functions, and Equations | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 176 | ### Step 4: Identify and Declare Events | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 200 | ### Step 5: Formulate Security Queries | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 263 | ### Step 6: Write Participant Processes | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 310 | ### Step 7: Write Main Process and Finalize | COMMENT |
| LOW | plugins/trailmark/skills/mermaid-to-proverif/SKILL.md | 346 | ### Step 8: Verify and Deliver | COMMENT |
| LOW | plugins/trailmark/skills/vector-forge/SKILL.md | 209 | ### Step 1: Build the Call Graph | COMMENT |
| LOW | plugins/trailmark/skills/vector-forge/SKILL.md | 229 | ### Step 2: Filter to Relevant Code | COMMENT |
| LOW | plugins/trailmark/skills/vector-forge/SKILL.md | 244 | ### Step 3: Graph-Informed Classification | COMMENT |
| LOW | plugins/trailmark/skills/vector-forge/SKILL.md | 263 | ### Step 4: Identify Cross-Package Test Gaps | COMMENT |
| LOW | plugins/trailmark/skills/vector-forge/SKILL.md | 283 | ### Step 5: Prioritize by Security Impact | COMMENT |
| LOW | plugins/trailmark/skills/vector-forge/SKILL.md | 295 | ### Step 6: Group by Vector Strategy | COMMENT |
| LOW | …ark/skills/vector-forge/references/fault-simulation.md | 23 | ### Step 1: Select Limb Widths | COMMENT |
| LOW | …ark/skills/vector-forge/references/fault-simulation.md | 41 | ### Step 2: Implement a Minimal Reference | COMMENT |
| LOW | …ark/skills/vector-forge/references/fault-simulation.md | 55 | ### Step 3: Inject Faults | COMMENT |
| LOW | …ark/skills/vector-forge/references/fault-simulation.md | 73 | ### Step 4: Extract Distinguishing Vectors | COMMENT |
| LOW | …ark/skills/vector-forge/references/fault-simulation.md | 94 | ### Step 5: Validate Against Production | COMMENT |
| LOW | …ins/trailmark/skills/trailmark-finding-triage/SKILL.md | 61 | ### Step 1: Normalize the Candidate | COMMENT |
| LOW⚡ | …ins/trailmark/skills/trailmark-finding-triage/SKILL.md | 78 | ### Step 2: Build Or Reuse The Graph | COMMENT |
| LOW⚡ | …ins/trailmark/skills/trailmark-finding-triage/SKILL.md | 88 | ### Step 3: Bind The Candidate | COMMENT |
| LOW⚡ | …ins/trailmark/skills/trailmark-finding-triage/SKILL.md | 97 | ### Step 4: Analyze Graph Evidence | COMMENT |
| LOW | …ins/trailmark/skills/trailmark-finding-triage/SKILL.md | 112 | ### Step 5: Decide And Handoff | COMMENT |
| LOW⚡ | plugins/trailmark/skills/trailmark-review-gate/SKILL.md | 56 | ### Step 1: Resolve Inputs | COMMENT |
| LOW⚡ | plugins/trailmark/skills/trailmark-review-gate/SKILL.md | 62 | ### Step 2: Build Graph Evidence | COMMENT |
| LOW⚡ | plugins/trailmark/skills/trailmark-review-gate/SKILL.md | 71 | ### Step 3: Normalize Changes | COMMENT |
| LOW | plugins/trailmark/skills/trailmark-review-gate/SKILL.md | 85 | ### Step 4: Apply Gate Rules | COMMENT |
| LOW | plugins/trailmark/skills/trailmark-review-gate/SKILL.md | 97 | ### Step 5: Emit Packet | COMMENT |
| LOW | …ailmark/skills/trailmark-variant-neighborhood/SKILL.md | 57 | ### Step 1: Normalize And Bind The Seed | COMMENT |
| LOW | …ailmark/skills/trailmark-variant-neighborhood/SKILL.md | 65 | ### Step 2: Expand Neighborhoods | COMMENT |
| LOW⚡ | …ailmark/skills/trailmark-variant-neighborhood/SKILL.md | 80 | ### Step 3: Rank Candidates | COMMENT |
| LOW⚡ | …ailmark/skills/trailmark-variant-neighborhood/SKILL.md | 87 | ### Step 4: Extract Pattern Guidance | COMMENT |
| LOW⚡ | …ailmark/skills/trailmark-variant-neighborhood/SKILL.md | 97 | ### Step 5: Emit Handoff Packet | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 62 | ### Step 0: Determine Input Type | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 86 | ### Step 1: Locate Protocol Entry Points | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 102 | ### Step 2: Identify Parties and Roles | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 119 | ### Step 3: Trace Message Flow | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 135 | ### Step 4: Annotate Cryptographic Operations | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 155 | ### Step 5: Identify Protocol Phases | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 297 | ### Step 6: Generate sequenceDiagram | COMMENT |
| LOW | …gins/trailmark/skills/crypto-protocol-diagram/SKILL.md | 313 | ### Step 7: Verify and Deliver | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 5 | ## Step 1: Analyze the Problem | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 24 | ## Step 2: Write Tests First | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 53 | ## Step 3: Analyze AST Structure | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 66 | ## Step 4: Write the Rule | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 115 | ## Step 5: Iterate Until Tests Pass | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 147 | ## Step 6: Optimize the Rule | COMMENT |
| LOW | …tor/skills/semgrep-rule-creator/references/workflow.md | 233 | ## Step 7: Final Run | COMMENT |
| LOW | …gins/differential-review/agents/adversarial-modeler.md | 36 | ### Step 1: Define the Attacker Model | COMMENT |
| LOW | …gins/differential-review/agents/adversarial-modeler.md | 53 | ### Step 2: Identify Concrete Attack Vectors | COMMENT |
| LOW | …gins/differential-review/agents/adversarial-modeler.md | 75 | ### Step 3: Rate Exploitability | COMMENT |
| LOW | …gins/differential-review/agents/adversarial-modeler.md | 85 | ### Step 4: Build Complete Exploit Scenario | COMMENT |
| LOW | …gins/differential-review/agents/adversarial-modeler.md | 110 | ### Step 5: Cross-Reference with Baseline | COMMENT |
| LOW | …erential-review/skills/differential-review/patterns.md | 190 | // Step 1: Approve | COMMENT |
| 171 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ills/interpreting-culture-index/scripts/extract_pdf.py | 41 | "logic": [5, null], | STRING |
| HIGH | …ills/interpreting-culture-index/scripts/extract_pdf.py | 42 | "ingenuity": [2, null] | STRING |
| HIGH | …preting-culture-index/scripts/culture_index/extract.py | 75 | # Secondary traits: L, I - [score, null] (absolute values per methodology) | COMMENT |
| HIGH | …roize-audit/skills/zeroize-audit/tools/generate_poc.py | 259 | for (size_t i = 0; i < len && i < 64; i++) {{ | CODE |
| HIGH | …roize-audit/skills/zeroize-audit/tools/generate_poc.py | 643 | "if (copy_dest && volatile_read_has_secret(copy_dest, 256))", | CODE |
| HIGH | plugins/c-review/tests/test_workflow_args.py | 358 | out of sixteen — so `'--scope ' + SCOPE` and `parts.push('--expect ' + e)`, the | STRING |
| HIGH | plugins/c-review/tests/test_workflow_assemble.py | 57 | "const log = (m) => logs.push(m);\n" | CODE |
| HIGH | plugins/c-review/tests/test_workflow_assemble.py | 193 | """The `.catch(() => null)` makes a crashed agent indistinguishable from a real failure: | STRING |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 283 | src.index("for (const merge of asArray(res && res.merges)") : src.index("const primaries =") | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 300 | "partsExpected.push(entry.partId + '='", loop | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 304 | assert "agentFailures.push(entry.partId + ': did not write its part file')" in block | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 419 | "{label: 'x', agentType: undefined}", | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 420 | "{label: 'x', agentType: null}", | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 597 | assert re.findall(r"[^\n]*\|\|\s*\[\][^\n]*", "const x = (a && a.b) || []") | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_sweep.py | 608 | assert "review_agents: reviewResults.filter((e) => e && e.result).length" in stats, stats | CODE |
| HIGH | plugins/c-review/tests/test_workflow_sweep.py | 251 | assert "knownClass(f && f.bug_class) ? f.bug_class : 'logic-flaw'" in body, body | CODE |
| HIGH | plugins/c-review/tests/test_workflow_sweep.py | 407 | The CLI's dispatch is guarded by `if (opts?.agentType != null)`, so an explicit | STRING |
| HIGH | plugins/c-review/tests/test_assemble_findings.py | 2650 | assert "partsExpected.push('dedup-agent')" not in src | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_run.py | 57 | calls.push({ | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_run.py | 65 | if (scripted && scripted.__reject) throw new Error(scripted.__reject) | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_run.py | 69 | const log = (m) => logs.push(String(m)) | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_run.py | 70 | const phase = (p) => phases.push(String(p)) | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_run.py | 77 | JSON.stringify({ ok: false, error: String(err && err.message), calls, logs, phases }) | CODE |
| HIGH⚡ | plugins/c-review/tests/test_workflow_run.py | 620 | a `groupsFailed.push(...groupsAttempted)` appended one line later, and the subset | STRING |
| HIGH⚡ | …constant-time-analysis/ct_analyzer/script_analyzers.py | 390 | "arrays.equals": "Arrays.equals() may early-terminate; use MessageDigest.isEqual()", | CODE |
| HIGH⚡ | …constant-time-analysis/ct_analyzer/script_analyzers.py | 391 | "string.equals": "String.equals() may early-terminate on secret data", | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 432 | "arrays.equals": "Arrays.equals() may early-terminate; use MessageDigest.isEqual()", | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 435 | "string.equals": "String.equals() may early-terminate on secret data", | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 764 | if func_name and func_name != "(null)": | CODE |
| HIGH⚡ | plugins/rust-review/scripts/test_prompt_regexes.py | 79 | assert matches(pattern, 'p.push("x");') | CODE |
| HIGH | …p-rule-variant-creator/tests/test_workflow_contract.py | 540 | # Without the catch the throw drops the item to null, and a deterministic refusal | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …kills/interpreting-culture-index/scripts/check_deps.py | 16 | CODE | |
| LOW | …kills/interpreting-culture-index/scripts/check_deps.py | 31 | CODE | |
| LOW | …kills/interpreting-culture-index/scripts/check_deps.py | 36 | CODE | |
| LOW | …kills/interpreting-culture-index/scripts/check_deps.py | 41 | CODE | |
| LOW | …kills/interpreting-culture-index/scripts/check_deps.py | 46 | CODE | |
| LOW | …ills/interpreting-culture-index/scripts/extract_pdf.py | 59 | CODE | |
| LOW | …rpreting-culture-index/scripts/culture_index/models.py | 3 | CODE | |
| LOW | …reting-culture-index/scripts/culture_index/__init__.py | 7 | CODE | |
| LOW | …reting-culture-index/scripts/culture_index/__init__.py | 8 | CODE | |
| LOW | …reting-culture-index/scripts/culture_index/__init__.py | 8 | CODE | |
| LOW | …reting-culture-index/scripts/culture_index/__init__.py | 9 | CODE | |
| LOW | …reting-culture-index/scripts/culture_index/__init__.py | 10 | CODE | |
| LOW | …ulture-index/scripts/culture_index/opencv_extractor.py | 7 | CODE | |
| LOW | …preting-culture-index/scripts/culture_index/extract.py | 13 | CODE | |
| LOW | plugins/c-review/tests/test_workflow_args.py | 14 | CODE | |
| LOW | plugins/c-review/tests/test_workflow_assemble.py | 15 | CODE | |
| LOW | plugins/c-review/tests/test_workflow_sweep.py | 11 | CODE | |
| LOW | plugins/c-review/tests/test_assemble_findings.py | 4 | CODE | |
| LOW | plugins/c-review/tests/test_workflow_run.py | 20 | CODE | |
| LOW | plugins/c-review/tests/test_enumerate_units.py | 13 | CODE | |
| LOW | plugins/c-review/tests/test_generate_sarif.py | 4 | CODE | |
| LOW | plugins/c-review/tests/test_check_ledger.py | 10 | CODE | |
| LOW | plugins/c-review/tests/test_render_report.py | 4 | CODE | |
| LOW | plugins/c-review/scripts/enumerate_units.py | 36 | CODE | |
| LOW | plugins/c-review/scripts/check_ledger.py | 63 | CODE | |
| LOW | plugins/c-review/scripts/generate_sarif.py | 13 | CODE | |
| LOW | plugins/c-review/scripts/findings_model.py | 13 | CODE | |
| LOW | plugins/c-review/scripts/render_report.py | 15 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 35 | CODE | |
| LOW | …trailmark/skills/graph-evolution/scripts/graph_diff.py | 10 | CODE | |
| LOW | …s/trailmark/skills/diagramming-code/scripts/diagram.py | 11 | CODE | |
| LOW | …licing-code-context/scripts/test_build_slice_packet.py | 7 | CODE | |
| LOW | …lls/slicing-code-context/scripts/build_slice_packet.py | 7 | CODE | |
| LOW | plugins/post-patch-validation/tests/conftest.py | 1 | CODE | |
| LOW | …/post-patch-validation/tests/test_workflow_contract.py | 1 | CODE | |
| LOW | …st-patch-validation/tests/test_execution_assessment.py | 1 | CODE | |
| LOW | plugins/post-patch-validation/tests/test_runner.py | 1 | CODE | |
| LOW | plugins/post-patch-validation/tests/test_assessment.py | 1 | CODE | |
| LOW | plugins/post-patch-validation/tests/test_eval_cases.py | 1 | CODE | |
| LOW | …gins/post-patch-validation/tests/test_cli_artifacts.py | 1 | CODE | |
| LOW | …post-patch-validation/scripts/post_patch_validation.py | 17 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 8 | CODE | |
| LOW | …stant-time-analysis/ct_analyzer/tests/test_analyzer.py | 23 | CODE | |
| 52 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/git-cleanup/evals/run-evals.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/git-cleanup/evals/selftest/run-selftest.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/git-cleanup/evals/lib/graders.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/git-cleanup/workflows/analyze-branches.js | 21 | // path recommends `git branch -D` on `production`. Names are matched case-insensitively | COMMENT |
| LOW | plugins/git-cleanup/workflows/analyze-branches.js | 41 | // Clustering is transitive on a two-segment match, so a bot convention collapses without | COMMENT |
| LOW | plugins/git-cleanup/workflows/analyze-branches.js | 281 | } | COMMENT |
| LOW | plugins/git-cleanup/workflows/analyze-branches.js | 361 | const inGroup = new Set(clusters.filter((c) => c.length > 1).flatMap((c) => c.map((b) => b.name))) | COMMENT |
| LOW | …w-walkthrough/evals/rate-limit-walkthrough/scaffold.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …oize-audit/skills/zeroize-audit/tools/diff_rust_mir.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …ize-audit/skills/zeroize-audit/tools/track_dataflow.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_asm.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …ns/zeroize-audit/skills/zeroize-audit/tools/diff_ir.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/c-review/workflows/c-review.js | 21 | // Design, in three rules (measured in the internal c-review benchmark harness, | COMMENT |
| LOW | plugins/c-review/workflows/c-review.js | 141 | // derives the count from the line total. | COMMENT |
| LOW | plugins/c-review/workflows/c-review.js | 1381 | } | COMMENT |
| LOW | plugins/c-review/scripts/enumerate_units.py | 861 | # `body` returns None and an `if` contributes no seam at all: a function with a | COMMENT |
| LOW | plugins/c-review/scripts/enumerate_units.py | 1721 | """ | COMMENT |
| LOW | plugins/c-review/scripts/check_ledger.py | 341 | if not isinstance(lines, list): | COMMENT |
| LOW | plugins/c-review/scripts/check_ledger.py | 461 | malformed.append( | COMMENT |
| LOW | plugins/c-review/scripts/generate_sarif.py | 341 | or _items(run.get("stale_part_files")) | COMMENT |
| LOW | plugins/c-review/scripts/render_report.py | 41 | COMMENT | |
| LOW | plugins/c-review/scripts/render_report.py | 61 | # | COMMENT |
| LOW | plugins/c-review/scripts/assemble_findings.py | 81 | REQUIRED_FINDING_FIELDS = ("title", "file", "line", "description", "impact", "recommendation") | COMMENT |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1781 | # small as this can be made without a transaction. | COMMENT |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1821 | tmp.replace(path) | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 1781 | functions.append({"name": current_function, "instructions": 0}) | COMMENT |
| LOW | …-analysis/ct_analyzer/tests/test_samples/vulnerable.rb | 1 | # Vulnerable Ruby code sample for constant-time analysis testing. | COMMENT |
| LOW | …ct_analyzer/tests/test_samples/decompose_vulnerable.rs | 1 | //! Vulnerable implementations of ML-DSA decompose for testing the constant-time analyzer. | COMMENT |
| LOW | …ct_analyzer/tests/test_samples/decompose_vulnerable.rs | 61 | /// VULNERABLE: Floating-point division | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 21 | # identical run. Three runs and a >1/2 threshold is the spec's recommendation | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 61 | # from a miss. | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 81 | # since per-turn cost climbs as context grows. | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 101 | } | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 181 | esac | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 221 | --permission-mode plan \ | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 261 | # aggregator switches on and the self-test asserts. Flattened to one line and | COMMENT |
| LOW | plugins/property-based-testing/evals-extra/run.sh | 441 | # ...and a sweep that merely scores badly must stay distinguishable from that. | COMMENT |
| LOW | …ns/property-based-testing/evals-extra/effectiveness.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …ns/property-based-testing/evals-extra/effectiveness.sh | 21 | # Grading is differential, never prose. The suite runs against the defective | COMMENT |
| LOW | plugins/insecure-defaults/tests/harness.js | 1 | #!/usr/bin/env node | COMMENT |
| LOW | plugins/insecure-defaults/tests/harness.js | 101 | // The source as the running scenario should see it: mutated when self-testing, so a | COMMENT |
| LOW | plugins/insecure-defaults/tests/seed-coverage.js | 1 | #!/usr/bin/env node | COMMENT |
| LOW | plugins/rust-review/skills/rust-review/SKILL.md | 301 | ```bash | COMMENT |
| LOW | plugins/variant-analysis/tests/eval.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/variant-analysis/tests/eval.sh | 181 | work="$OUT_DIR/$name/$mode/run$run" | COMMENT |
| LOW | plugins/variant-analysis/tests/setup-gradio.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | plugins/variant-analysis/tests/score.py | 181 | loose |= paths_in(line) | COMMENT |
| LOW | plugins/variant-analysis/tests/score.py | 321 | # These are NOT false positives. The fixture is a real 772-file project that | COMMENT |
| LOW | plugins/variant-analysis/tests/score.py | 561 | # Both from a cold run of the workflow, and both scored wrong before this pass. | COMMENT |
| LOW | plugins/variant-analysis/workflows/variants.js | 21 | // args = { | COMMENT |
| LOW | plugins/variant-analysis/workflows/variants.js | 81 | // breaks on any root containing a space. | COMMENT |
| LOW | …or/skills/supply-chain-risk-auditor/scripts/collect.py | 41 | ) | COMMENT |
| LOW | …itor/skills/supply-chain-risk-auditor/scripts/model.py | 81 | # Registry-dependent: npm publishes these, PyPI publishes none of them, Go has no | COMMENT |
| LOW | …itor/skills/supply-chain-risk-auditor/scripts/model.py | 101 | TIER_INFO = ("provenance", "security_policy", "downloads") | COMMENT |
| LOW | …ins/dimensional-analysis/agents/dimension-annotator.md | 121 | // After | COMMENT |
| LOW | …ins/dimensional-analysis/agents/dimension-validator.md | 221 | 2. If callee is in scope, verify actual return dimension | COMMENT |
| LOW | …ins/dimensional-analysis/agents/dimension-validator.md | 241 | // | COMMENT |
| LOW | …ins/dimensional-analysis/agents/dimension-validator.md | 261 | // FORMULA VERIFICATION | COMMENT |
| LOW | …sis/skills/dimensional-analysis/references/annotate.md | 201 | /// @return amountBOut D{Y}{TOKEN_B} Amount of token B received | COMMENT |
| 26 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/git-cleanup/evals/run-evals.sh | 16 | # suite would be measuring the harness rather than the plugin's own safety gates. | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/lib/graders.sh | 9 | # ERROR <reason> -- could not evaluate; a broken harness, not a failing plugin | COMMENT |
| MEDIUM | plugins/git-cleanup/evals/lib/graders.sh | 172 | # correct verdict look like a harness fault. | COMMENT |
| MEDIUM | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 285 | """Perform comprehensive CFG analysis.""" | STRING |
| MEDIUM | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 335 | """Perform comprehensive analysis on a function.""" | STRING |
| MEDIUM | plugins/c-review/scripts/assemble_findings.py | 124 | # The consolidated 56-class catalogue (66 -> 56, per the internal benchmark harness). It is | COMMENT |
| MEDIUM | …post-patch-validation/scripts/post_patch_validation.py | 69 | # A crashed, mis-imported, or never-built harness also exits nonzero, so those kinds must | COMMENT |
| MEDIUM | …post-patch-validation/scripts/post_patch_validation.py | 1268 | # retain observations but withhold every conclusion that assumes a working harness. | COMMENT |
| MEDIUM | …-analysis/ct_analyzer/tests/test_samples/vulnerable.rb | 153 | # Test harness to prevent dead code elimination | COMMENT |
| MEDIUM⚡ | plugins/property-based-testing/evals-extra/run.sh | 37 | # — a crash absorbed by the floor's leeway would report a harness failure as a | COMMENT |
| MEDIUM⚡ | plugins/property-based-testing/evals-extra/run.sh | 43 | # 2 harness failure: no queries discovered, or a malformed eval file | COMMENT |
| MEDIUM | plugins/property-based-testing/evals-extra/run.sh | 66 | # slowest plausible session or ordinary slowness reads as a harness failure. | COMMENT |
| MEDIUM | plugins/property-based-testing/evals-extra/run.sh | 253 | # failure verdict here scores a broken harness as data. | COMMENT |
| MEDIUM | plugins/property-based-testing/evals-extra/run.sh | 576 | # line stopped one short and looked like a lost session in the one harness that must | COMMENT |
| MEDIUM | plugins/property-based-testing/evals-extra/run.sh | 652 | # crashed all three times still totals 27 and reports a pass. That is a harness | COMMENT |
| MEDIUM | …ns/property-based-testing/evals-extra/effectiveness.sh | 34 | # a harness failure must not read as a clean result. | COMMENT |
| MEDIUM | plugins/insecure-defaults/tests/run_seeds.sh | 3 | # Without it the harness and the coverage check run only when someone remembers to, | COMMENT |
| MEDIUM | plugins/static-analysis/tests/run_codeql_build_tests.sh | 2 | # Wrapper so CI's run_*.sh discovery picks up the codeql-build harness; without it a guard | COMMENT |
| MEDIUM | plugins/static-analysis/tests/run_workflow_tests.sh | 2 | # Wrapper so CI's run_*.sh discovery picks up the workflow harness; without it a guard removed | COMMENT |
| MEDIUM | …ins/testing-handbook-skills/scripts/validate-skills.py | 218 | if "## writing a harness" in content_lower or "## quick start" in content_lower: | CODE |
| MEDIUM | …ant-creator/tests/test_skill_describes_the_workflow.py | 42 | # highest-leverage line in the file: a skill that never triggers may as well not exist. | COMMENT |
| MEDIUM | plugins/code-improver/evals/check_contamination.py | 102 | # Older harness builds used "evidence"; current ones use "explanation". | COMMENT |
| MEDIUM | plugins/code-improver/evals/ablation/run.sh | 67 | # harness-side, not plugin content, so both arms answer the same questions). | COMMENT |
| MEDIUM | plugins/code-improver/tests/run_workflow_tests.sh | 2 | # Wrapper so CI's run_*.sh discovery picks up the workflow harness; without it a guard | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ills/interpreting-culture-index/scripts/extract_pdf.py | 171 | CODE | |
| LOW | …ulture-index/scripts/culture_index/opencv_extractor.py | 204 | CODE | |
| LOW | …ns/review-walkthrough/tests/test_render_walkthrough.py | 100 | CODE | |
| LOW | …kills/review-walkthrough/scripts/render_walkthrough.py | 60 | CODE | |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 217 | CODE | |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 66 | CODE | |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 156 | CODE | |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 211 | CODE | |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 313 | CODE | |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 347 | CODE | |
| LOW | …lls/zeroize-audit/tools/scripts/find_dangerous_apis.py | 240 | CODE | |
| LOW | …ills/zeroize-audit/tools/scripts/check_rust_asm_x86.py | 151 | CODE | |
| LOW | …t/skills/zeroize-audit/tools/scripts/check_rust_asm.py | 110 | CODE | |
| LOW | …/zeroize-audit/tools/scripts/check_rust_asm_aarch64.py | 209 | CODE | |
| LOW | …t/skills/zeroize-audit/tools/scripts/semantic_audit.py | 231 | CODE | |
| LOW | plugins/c-review/tests/test_workflow_sweep.py | 162 | CODE | |
| LOW | plugins/c-review/tests/test_workflow_sweep.py | 346 | CODE | |
| LOW | plugins/c-review/scripts/enumerate_units.py | 573 | CODE | |
| LOW | plugins/c-review/scripts/enumerate_units.py | 1143 | CODE | |
| LOW | plugins/c-review/scripts/check_ledger.py | 255 | CODE | |
| LOW | plugins/c-review/scripts/check_ledger.py | 303 | CODE | |
| LOW | plugins/c-review/scripts/check_ledger.py | 371 | CODE | |
| LOW | plugins/c-review/scripts/generate_sarif.py | 126 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 455 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 857 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 991 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1064 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1123 | CODE | |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1581 | CODE | |
| LOW | …lls/slicing-code-context/scripts/build_slice_packet.py | 314 | CODE | |
| LOW | …post-patch-validation/scripts/post_patch_validation.py | 452 | CODE | |
| LOW | …post-patch-validation/scripts/post_patch_validation.py | 983 | CODE | |
| LOW | …post-patch-validation/scripts/post_patch_validation.py | 1296 | CODE | |
| LOW | …post-patch-validation/scripts/post_patch_validation.py | 1410 | CODE | |
| LOW | …post-patch-validation/scripts/post_patch_validation.py | 1772 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/analyzer.py | 1400 | CODE | |
| LOW | plugins/constant-time-analysis/ct_analyzer/analyzer.py | 1069 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 724 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 887 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 1262 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 1735 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2136 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2325 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2474 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2675 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2803 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3187 | CODE | |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3313 | CODE | |
| LOW | …stant-time-analysis/ct_analyzer/tests/test_analyzer.py | 390 | CODE | |
| LOW | …stant-time-analysis/ct_analyzer/tests/test_analyzer.py | 2249 | CODE | |
| LOW | …ng/skills/yara-rule-authoring/scripts/atom_analyzer.py | 30 | CODE | |
| LOW | …oring/skills/yara-rule-authoring/scripts/yara_rules.py | 218 | CODE | |
| LOW | …oring/skills/yara-rule-authoring/scripts/yara_rules.py | 244 | CODE | |
| LOW | …oring/skills/yara-rule-authoring/scripts/yara_rules.py | 269 | CODE | |
| LOW | …oring/skills/yara-rule-authoring/scripts/yara_rules.py | 309 | CODE | |
| LOW | …oring/skills/yara-rule-authoring/scripts/yara_rules.py | 357 | CODE | |
| LOW | …oring/skills/yara-rule-authoring/scripts/yara_rules.py | 470 | CODE | |
| LOW | plugins/rust-review/scripts/generate_sarif.py | 161 | CODE | |
| LOW | plugins/rust-review/scripts/validate_artifacts.py | 142 | CODE | |
| LOW | plugins/rust-review/scripts/build_run_plan.py | 170 | CODE | |
| 15 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ills/interpreting-culture-index/scripts/extract_pdf.py | 213 | print(f"Error: {result.error}", file=sys.stderr) | STRING |
| MEDIUM | …ills/interpreting-culture-index/scripts/extract_pdf.py | 232 | print(f"Error: {result.error}", file=sys.stderr) | STRING |
| LOW | …preting-culture-index/scripts/culture_index/extract.py | 179 | except Exception as e: | CODE |
| MEDIUM | …udit/tests/rust-regression/run_mixed_language_smoke.sh | 19 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 364 | print(f"Error: cannot read source file {args.src}: {e}", file=sys.stderr) | CODE |
| MEDIUM | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 402 | print(f"Error: cannot read IR file {args.ir}: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | …ills/zeroize-audit/tools/mcp/normalize_mcp_evidence.py | 27 | print(f"Error reading {input_path}: {e}", file=sys.stderr) | CODE |
| MEDIUM⚡ | …ills/zeroize-audit/tools/mcp/normalize_mcp_evidence.py | 30 | print("Error: no --input specified and stdin is a terminal", file=sys.stderr) | CODE |
| MEDIUM⚡ | …ills/zeroize-audit/tools/mcp/normalize_mcp_evidence.py | 35 | print(f"Error: invalid JSON on stdin: {e}", file=sys.stderr) | CODE |
| LOW | plugins/c-review/scripts/check_ledger.py | 774 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1308 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | plugins/c-review/scripts/assemble_findings.py | 1702 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | …lls/slicing-code-context/scripts/build_slice_packet.py | 913 | except Exception as exc: | CODE |
| MEDIUM | plugins/constant-time-analysis/ct_analyzer/analyzer.py | 1565 | print("Error: --arch is required when analyzing assembly files", file=sys.stderr) | STRING |
| MEDIUM | plugins/constant-time-analysis/ct_analyzer/analyzer.py | 1591 | print(f"Error: {e}", file=sys.stderr) | STRING |
| LOW | …based-testing/evals-extra/fixture/tests/test_parser.py | 9 | except Exception: | CODE |
| MEDIUM | …based-testing/evals-extra/fixture/tests/test_parser.py | 6 | def test_unpack_runs(data): | CODE |
| MEDIUM | …ng/skills/yara-rule-authoring/scripts/atom_analyzer.py | 39 | print(f"Error reading {file_path}: {e}", file=sys.stderr) | CODE |
| MEDIUM | …ng/skills/yara-rule-authoring/scripts/atom_analyzer.py | 107 | print(f"Error: {error}", file=sys.stderr) | CODE |
| MEDIUM | …ng/skills/yara-rule-authoring/scripts/atom_analyzer.py | 119 | print(f"Error: {coverage}", file=sys.stderr) | CODE |
| MEDIUM | …horing/skills/yara-rule-authoring/scripts/yara_lint.py | 111 | print(f"Error: {error}", file=sys.stderr) | CODE |
| MEDIUM | …horing/skills/yara-rule-authoring/scripts/yara_lint.py | 147 | print(f"Error: {coverage}", file=sys.stderr) | CODE |
| LOW | plugins/rust-review/scripts/generate_sarif.py | 243 | except Exception as exc: | CODE |
| LOW | plugins/rust-review/scripts/validate_artifacts.py | 171 | except Exception as exc: | CODE |
| LOW | …arp-edges/skills/sharp-edges/references/lang-python.md | 137 | except Exception: # Misses KeyboardInterrupt, SystemExit | CODE |
| LOW | …arp-edges/skills/sharp-edges/references/lang-python.md | 168 | except Exception as e: | CODE |
| LOW | …cide/skills/let-fate-decide/scripts/test_draw_cards.py | 427 | except Exception as e: | CODE |
| MEDIUM | …te-decide/skills/let-fate-decide/scripts/draw_cards.py | 310 | print(f"Error: card count must be 1-78, got {count}", file=sys.stderr) | CODE |
| MEDIUM⚡ | …te-decide/skills/let-fate-decide/scripts/draw_cards.py | 323 | print(f"Error: failed to read system entropy source: {e}", file=sys.stderr) | CODE |
| LOW⚡ | …te-decide/skills/let-fate-decide/scripts/draw_cards.py | 331 | except Exception as e: | CODE |
| MEDIUM⚡ | …te-decide/skills/let-fate-decide/scripts/draw_cards.py | 332 | print(f"Error: draw_cards.py failed: {e}", file=sys.stderr) | CODE |
| MEDIUM | …/static-analysis/skills/semgrep/scripts/merge_sarif.py | 238 | print(f"Error: {raw_dir} is not a directory", file=sys.stderr) | CODE |
| MEDIUM | …/static-analysis/skills/semgrep/scripts/merge_sarif.py | 254 | print(f"Error: {e}", file=sys.stderr) | CODE |
| MEDIUM | …/static-analysis/skills/semgrep/scripts/merge_sarif.py | 280 | print(f"Error: {e}", file=sys.stderr) | CODE |
| LOW | …ins/testing-handbook-skills/scripts/validate-skills.py | 495 | except Exception as e: | CODE |
| LOW | …ins/testing-handbook-skills/skills/atheris/examples.md | 47 | except Exception: | CODE |
| LOW | plugins/testing-handbook-skills/skills/atheris/SKILL.md | 268 | except Exception: | CODE |
| LOW | .github/scripts/check_codex_loadability.py | 242 | except Exception as exc: # noqa: BLE001 - CI should show RPC failures. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …w-walkthrough/evals/rate-limit-walkthrough/scaffold.sh | 4 | # Runs as `bash scaffold.sh` with cwd set to the eval sandbox cwd, so the | COMMENT |
| MEDIUM | …iew-walkthrough/evals/rate-limit-walkthrough/case.yaml | 12 | # Path relative to this case directory. Requires --scaffold; see evals/README.md. | COMMENT |
| MEDIUM | …skills/writing-lean-proofs/references/anti-patterns.md | 51 | ### Leftover debugging scaffolding | COMMENT |
| MEDIUM | …kills/writing-lean-proofs/references/llm-techniques.md | 57 | ## Sorry skeletons are the multi-agent protocol | COMMENT |
| MEDIUM | …ourcing/skills/open-sourcing/references/trailofbits.md | 58 | ## Project scaffolding | COMMENT |
| MEDIUM | plugins/goal-prompt/evals/easy-out-closed/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path | COMMENT |
| MEDIUM | …ugins/goal-prompt/evals/grounded-migration/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path | COMMENT |
| MEDIUM | plugins/goal-prompt/evals/ungrounded-vague/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path | COMMENT |
| MEDIUM | plugins/agentic-actions-auditor/README.md | 1 | # agentic-actions-auditor | COMMENT |
| MEDIUM | plugins/code-improver/evals/deep-reviewer/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold (so the agent never sees a path into | COMMENT |
| MEDIUM | plugins/code-improver/evals/pins-bite/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path into | COMMENT |
| MEDIUM | …/code-improver/evals/structural-escalation/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path into | COMMENT |
| MEDIUM | …s/code-improver/evals/reviewer-unavailable/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold (so the agent never sees a path into | COMMENT |
| MEDIUM | plugins/code-improver/evals/pr-mode/scaffold.sh | 2 | # Generates the PR fixture inside the eval scaffold (so the agent never sees a path into | COMMENT |
| MEDIUM | …de-improver/evals/termination-and-finalize/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path into | COMMENT |
| MEDIUM | plugins/code-improver/evals/scope-guard/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold (so the agent never sees a path into | COMMENT |
| MEDIUM | plugins/code-improver/evals/no-relitigation/scaffold.sh | 2 | # Generates the fixture inside the eval scaffold so the agent never sees a path into | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | plugins/c-review/scripts/render_report.py | 504 | except OSError: | CODE |
| HIGH | plugins/c-review/scripts/assemble_findings.py | 1847 | except OSError: # noqa: PERF203 - a leftover .partial is litter, not a failure | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3149 | except FileNotFoundError: | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3161 | except FileNotFoundError: | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3178 | except FileNotFoundError: | CODE |
| HIGH | …constant-time-analysis/ct_analyzer/script_analyzers.py | 1123 | except FileNotFoundError: | CODE |
| HIGH | …based-testing/evals-extra/fixture/tests/test_parser.py | 9 | except Exception: | CODE |
| HIGH | …cide/skills/let-fate-decide/scripts/test_draw_cards.py | 412 | except TypeError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ize-audit/skills/zeroize-audit/tools/track_dataflow.sh | 130 | # Check if any argument matches sensitive pattern | COMMENT |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 59 | # Check if this node has sensitive variable | COMMENT |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 66 | # Check if this node has wipe | COMMENT |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_cfg.py | 269 | # Check if any wipe node dominates this exit | COMMENT |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 258 | # Check if storing 0 | COMMENT |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 268 | # Check if addresses are sequential | COMMENT |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 371 | # Check if any argument is a sensitive local | COMMENT |
| LOW | …ills/zeroize-audit/tools/scripts/check_mir_patterns.py | 376 | # Check if the callee looks like an FFI function (not zeroize::) | COMMENT |
| LOW | …lls/zeroize-audit/tools/scripts/find_dangerous_apis.py | 307 | # Check if .await appears after this binding in the fn body | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 811 | # Check if we should skip this function | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 828 | # Check if this function is dangerous | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 1395 | # Check if we should skip this function | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 1823 | # Check if we should skip this function | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2099 | # Check if we should skip this function | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2437 | # Check if we should skip this method | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3230 | # Check if brace is on same line (rare but possible) | COMMENT |
| LOW | …constant-time-analysis/ct_analyzer/script_analyzers.py | 3276 | # Check if we should skip this method | COMMENT |
| LOW | plugins/gh-cli/hooks/intercept-github-curl.sh | 17 | # Check if the curl/wget targets a GitHub URL | COMMENT |
| LOW | …ins/testing-handbook-skills/scripts/validate-skills.py | 492 | # Read file | COMMENT |
| LOW | …ins/testing-handbook-skills/scripts/validate-skills.py | 675 | # Output results | COMMENT |
| LOW | …r-setup/skills/devcontainer-setup/resources/install.sh | 758 | # Check if in PATH | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ns/zeroize-audit/skills/zeroize-audit/tools/emit_ir.sh | 6 | # Usage: | COMMENT |
| LOW | …ize-audit/skills/zeroize-audit/tools/track_dataflow.sh | 6 | # Usage: | COMMENT |
| LOW | …eroize-audit/skills/zeroize-audit/tools/analyze_asm.sh | 6 | # Usage: | COMMENT |
| LOW | …roize-audit/skills/zeroize-audit/tools/analyze_heap.sh | 6 | # Usage: | COMMENT |
| LOW | …s/zeroize-audit/skills/zeroize-audit/tools/emit_asm.sh | 6 | # Usage: | COMMENT |
| LOW | …oize-audit/skills/zeroize-audit/tools/mcp/check_mcp.sh | 6 | # Usage: | COMMENT |
| LOW⚡ | plugins/property-based-testing/evals-extra/run.sh | 29 | # Usage: | COMMENT |
| LOW | …ns/property-based-testing/evals-extra/effectiveness.sh | 26 | # Usage: | COMMENT |
| LOW | plugins/variant-analysis/tests/eval.sh | 11 | # Usage: | COMMENT |
| LOW | plugins/variant-analysis/tests/setup-gradio.sh | 12 | # Usage: | COMMENT |
| LOW | …/skills/modern-python/templates/pre-commit-config.yaml | 7 | # Usage: | COMMENT |
| LOW | …alysis/skills/sarif-parsing/resources/sarif_helpers.py | 373 | # Example usage | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …or/skills/supply-chain-risk-auditor/scripts/collect.py | 617 | Read a plain-text manifest as UTF-8, refusing anything that will not decode. The JSON and TOML readers below alread | STRING |
| HIGH | …itor/skills/supply-chain-risk-auditor/scripts/model.py | 170 | Count each criterion's states, refusing anything that hides a dependency. Args: deps: The dependencies that | STRING |
| HIGH | …or/skills/supply-chain-risk-auditor/scripts/sources.py | 276 | Batch-query OSV. One HTTP call per 500 packages. Args: http: Caching client. queries: (ecosystem, n | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …constant-time-analysis/ct_analyzer/script_analyzers.py | 2976 | # Create a minimal project file for compilation | COMMENT |
| MEDIUM | …stant-time-analysis/ct_analyzer/tests/test_analyzer.py | 622 | # Create a temp file with Math.sqrt | COMMENT |
| MEDIUM | …stant-time-analysis/ct_analyzer/tests/test_analyzer.py | 1508 | # Create a simple vulnerable JS file for testing | COMMENT |
| MEDIUM | plugins/gh-cli/hooks/test_helper.bash | 33 | # Create a minimal PATH containing jq but not gh. | COMMENT |
| MEDIUM | …r-setup/skills/devcontainer-setup/resources/install.sh | 753 | # Create a symlink to the original script | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/review-walkthrough/tests/test_eval_graders.py | 157 | ("placeholder", "no-placeholder-survives"), | CODE |
| LOW | plugins/review-walkthrough/tests/test_eval_graders.py | 175 | elif defect == "placeholder": | CODE |
| LOW⚡ | plugins/c-review/tests/test_render_report.py | 609 | assert not re.search(r"^fake_key:", head, re.M) | CODE |
| LOW⚡ | …ase-apk-scanner/skills/firebase-apk-scanner/scanner.sh | 605 | local fake_email | CODE |
| LOW⚡ | …ase-apk-scanner/skills/firebase-apk-scanner/scanner.sh | 606 | fake_email="definitely_not_exists_$(date +%s)@nonexistent-domain-test.com" | CODE |
| LOW⚡ | …ase-apk-scanner/skills/firebase-apk-scanner/scanner.sh | 613 | -d "{\"identifier\":\"${fake_email}\",\"continueUri\":\"https://localhost\"}" \ | CODE |
| LOW | …ebase-apk-scanner/skills/firebase-apk-scanner/SKILL.md | 163 | -d '{"email":"test@test.com","password":"Test123!","returnSecureToken":true}' \ | CODE |
| LOW | …lls/firebase-apk-scanner/references/vulnerabilities.md | 54 | email: 'user@example.com', | CODE |
| LOW | …lls/firebase-apk-scanner/references/vulnerabilities.md | 204 | "address": "123 Main St" | CODE |
| LOW | …lls/firebase-apk-scanner/references/vulnerabilities.md | 779 | -d '{"email":"test@test.com","password":"Test123!","returnSecureToken":true}' \ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …tions-auditor/references/vector-g-eval-of-ai-output.md | 77 | # eval expands shell metacharacters in AI-generated label values | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | plugins/insecure-defaults/workflows/audit.js | 260 | ## Step 0: load your category definition | COMMENT |
| LOW | plugins/insecure-defaults/workflows/audit.js | 275 | ## Step 1: derive the patterns for *this* stack | COMMENT |
| LOW | plugins/insecure-defaults/workflows/audit.js | 286 | ## Step 2: run them and collect | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …reting-culture-index/scripts/culture_index/__init__.py | 14 | __all__ = [ | CODE |
| LOW | …udit/skills/zeroize-audit/tools/analyze_ir_semantic.py | 180 | def _update_control_flow(self, inst: IRInstruction) -> None: | CODE |
| LOW | plugins/constant-time-analysis/ct_analyzer/__init__.py | 30 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …licing-code-context/scripts/test_build_slice_packet.py | 582 | "def helper(value: int) -> int:\n" | CODE |