Scale computer-use 2.0 with open-source drivers, cross-OS fleets, and benchmarks for training, evaluation, and data generation.
This report summarizes scanner evidence for trycua/cua, a Rust project with 29,295 GitHub stars. SynthScan examined 2,169,610 lines of code across 7006 source files, recording 13356 pattern matches distributed across 27 syntactic categories. The legacy adjusted pattern signal is 8.6 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 8646 finding(s).
Are imports declared and package/API names verified? 1948 finding(s).
Are wrappers, guards, and repeated structures necessary? 6623 finding(s).
Which changes need focused human review? 13356 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 13356 distinct pattern matches across 27 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_image_builder.py | 125 | async def test_variable_used_in_run(self): | CODE |
| LOW | tests/test_image_builder.py | 142 | async def test_copy_preserves_content(self, tmp_path): | CODE |
| LOW | tests/test_image_builder.py | 154 | async def test_expose_port_reachable(self): | CODE |
| LOW | tests/test_image_builder.py | 352 | async def test_apk_install_from_env(self): | CODE |
| LOW⚡ | tests/test_image_builder_cloud.py | 51 | async def test_android_env_multiple(): | CODE |
| LOW | tests/test_public_containerdisk_refs.py | 14 | def test_tracked_files_do_not_reference_private_containerdisk_repositories(self) -> None: | CODE |
| LOW⚡ | tests/test_interfaces.py | 274 | async def test_screenshot_returns_bytes(self): | CODE |
| LOW⚡ | tests/test_interfaces.py | 279 | async def test_screenshot_png_magic(self): | CODE |
| LOW⚡ | tests/test_interfaces.py | 567 | async def test_keypress_combination(self): | CODE |
| LOW⚡ | tests/test_interfaces.py | 588 | async def test_forward_single_context_manager(self): | CODE |
| LOW⚡ | tests/test_interfaces.py | 776 | async def test_get_active_title_returns_string(self): | CODE |
| LOW⚡ | tests/test_interfaces.py | 800 | async def test_get_active_title_returns_string(self): | CODE |
| LOW | tests/test_interfaces.py | 89 | async def test_run_failure_returncode(self): | CODE |
| LOW | tests/test_interfaces.py | 107 | async def test_run_multiline_output(self): | CODE |
| LOW | tests/test_interfaces.py | 113 | async def test_run_sequential_state(self): | CODE |
| LOW | tests/test_interfaces.py | 126 | async def test_commandresult_fields(self): | CODE |
| LOW | tests/test_interfaces.py | 308 | async def test_screenshot_returns_bytes(self): | CODE |
| LOW | tests/test_interfaces.py | 313 | async def test_screenshot_png_magic(self): | CODE |
| LOW | tests/test_interfaces.py | 336 | async def test_screenshot_returns_bytes(self): | CODE |
| LOW | tests/test_interfaces.py | 353 | async def test_screenshot_returns_bytes(self): | CODE |
| LOW | tests/test_interfaces.py | 511 | async def test_keypress_combination(self): | CODE |
| LOW | tests/test_interfaces.py | 515 | async def test_keypress_string_list(self): | CODE |
| LOW | tests/test_interfaces.py | 543 | async def test_keypress_combination(self): | CODE |
| LOW | tests/test_interfaces.py | 606 | async def test_forward_multiple_ports(self): | CODE |
| LOW | tests/test_interfaces.py | 629 | async def test_forward_no_ports_raises(self): | CODE |
| LOW | tests/test_interfaces.py | 689 | async def test_create_custom_dimensions(self): | CODE |
| LOW | tests/test_interfaces.py | 709 | async def test_close_returns_exit_code_or_none(self): | CODE |
| LOW | tests/test_interfaces.py | 717 | async def test_multiple_sessions_independent(self): | CODE |
| LOW | tests/test_interfaces.py | 788 | async def test_get_active_title_returns_string(self): | CODE |
| LOW | tests/test_interfaces.py | 892 | async def test_gesture_invalid_raises(self): | CODE |
| LOW⚡ | tests/test_telemetry.py | 43 | def test_disabled_when_cua_telemetry_is_off(self, monkeypatch): | CODE |
| LOW⚡ | tests/test_telemetry.py | 47 | def test_enabled_when_nothing_set(self): | CODE |
| LOW⚡ | tests/test_telemetry.py | 54 | def test_disabled_by_do_not_track(self, monkeypatch): | CODE |
| LOW⚡ | tests/test_telemetry.py | 58 | def test_off_in_ci_unless_opted_in(self, monkeypatch): | CODE |
| LOW⚡ | tests/test_telemetry.py | 64 | def test_record_event_uses_mocked_client_only(self, offline): | CODE |
| LOW⚡ | tests/test_telemetry.py | 70 | def test_record_event_noop_when_disabled(self, offline, monkeypatch, tmp_path): | CODE |
| LOW | …/integration/sandbox_cli/test_linux_local_container.py | 43 | async def test_linux_local_container(): | CODE |
| LOW | …ntegration/sandbox_cli/test_macos_local_registry_vm.py | 41 | async def test_macos_local_registry_vm(): | CODE |
| LOW | …/integration/sandbox_cli/test_linux_cloud_container.py | 34 | async def test_linux_cloud_container(): | CODE |
| LOW | …ntegration/sandbox_cli/test_linux_local_registry_vm.py | 42 | async def test_linux_local_registry_vm(): | CODE |
| LOW | …/integration/sandbox_sdk/test_linux_local_container.py | 37 | async def test_linux_local_container(): | CODE |
| LOW | …ntegration/sandbox_sdk/test_macos_local_registry_vm.py | 42 | async def test_macos_local_registry_vm(): | CODE |
| LOW | …integration/sandbox_sdk/test_linux_local_osworld_vm.py | 56 | async def test_linux_local_osworld_vm(): | CODE |
| LOW | …/integration/sandbox_sdk/test_linux_cloud_container.py | 32 | async def test_linux_cloud_container(): | CODE |
| LOW | …ntegration/sandbox_sdk/test_linux_local_registry_vm.py | 44 | async def test_linux_local_registry_vm(): | CODE |
| LOW | …/integration/sandbox_sdk/test_android_local_gym_pwa.py | 93 | async def test_android_local_gym_pwa(): | CODE |
| LOW⚡ | tests/e2e/cua-sdk/test_run_janitor.py | 29 | def test_only_this_runs_prefix(self) -> None: | CODE |
| LOW⚡ | tests/e2e/cua-sdk/test_run_janitor.py | 32 | def test_refuses_run_ids_that_could_widen_the_match(self) -> None: | CODE |
| LOW⚡ | tests/e2e/cua-sdk/test_run_janitor.py | 37 | def test_nothing_matches_nothing_removed(self) -> None: | CODE |
| LOW | …s/e2e/cua-sdk/test_fleet_gateway_conformance_bearer.py | 80 | def test_bearer_file_is_private_rewritten_on_refresh_and_removed_on_stop(): | CODE |
| LOW | …s/e2e/cua-sdk/test_fleet_gateway_conformance_bearer.py | 97 | def test_background_thread_refreshes_before_expiry(): | CODE |
| LOW | tests/e2e/cua-sdk/python/conftest.py | 49 | def pytest_runtest_makereport(item, call): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 165 | def test_first_cloud_fleet_fake(fake_fleet, fixtures): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 195 | def test_first_cloud_fleet_live(live_fleet): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 212 | def test_first_cloud_fleet_env_image(live_fleet): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 240 | def test_first_cloud_fleet_env_image_kubevirt(live_fleet): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 376 | def test_ephemeral_pool_cleaned_up_live(live_fleet): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 383 | def test_pool_name_collision_is_typed(live_fleet): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_images.py | 127 | def test_cli_build_push_run_container(local_cua, tmp_path): | CODE |
| LOW | tests/e2e/cua-sdk/python/test_images.py | 164 | def test_sdk_local_layers_apply(local_cua): | CODE |
| 3680 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/cli-cast/record.py | 55 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/cli-cast/record.py | 57 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/cli-cast/record.py | 90 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tools/cli-cast/record.py | 92 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/cli-cast/record.py | 158 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/cli-cast/record.py | 160 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/cli-cast/record.py | 177 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tools/cli-cast/record.py | 179 | # -------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_image_builder.py | 18 | # ── helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/test_image_builder.py | 29 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 31 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 200 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 202 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 262 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 264 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 335 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder.py | 337 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 26 | # ── Data types ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 69 | # ── Helpers ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 82 | # ── Sandbox lifecycle ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 120 | # ── Per-sandbox actions ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 165 | # ── Worker loop ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 191 | # ── Progress reporter ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 216 | # ── Benchmark orchestrator ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 226 | # ── Provision ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 240 | # ── Load test ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 265 | # ── Cleanup ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 269 | # ── Aggregate ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 286 | # ── Report ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark_local.py | 318 | # ── CLI ─────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 28 | # ── Data types ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 71 | # ── Helpers ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 84 | # ── Sandbox lifecycle ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 127 | # ── Per-sandbox actions ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 174 | # ── Worker loop ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 201 | # ── Progress reporter ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 226 | # ── Benchmark orchestrator ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 237 | # ── Provision ────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 253 | # ── Load test ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 278 | # ── Cleanup ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 282 | # ── Aggregate ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 299 | # ── Report ──────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 331 | # ── CLI ─────────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/android_rps_benchmark.py | 396 | # ── --delete ────────────────────────────────────────────────────────── | STRING |
| MEDIUM | tests/android_rps_benchmark.py | 410 | # ── --continue ──────────────────────────────────────────────────────── | STRING |
| MEDIUM | tests/android_rps_benchmark.py | 477 | # ── --provision ─────────────────────────────────────────────────────── | STRING |
| MEDIUM | tests/android_rps_benchmark.py | 514 | # ── normal (all-in-one) ─────────────────────────────────────────────── | STRING |
| MEDIUM | tests/test_image_builder_cloud.py | 26 | # ── helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | tests/test_image_builder_cloud.py | 37 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder_cloud.py | 39 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_image_builder_cloud.py | 59 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_image_builder_cloud.py | 61 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder_cloud.py | 72 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM | tests/test_image_builder_cloud.py | 74 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_interfaces.py | 263 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_interfaces.py | 265 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_interfaces.py | 577 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_interfaces.py | 579 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_interfaces.py | 767 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| MEDIUM⚡ | tests/test_interfaces.py | 769 | # ═══════════════════════════════════════════════════════════════════════════ | COMMENT |
| 1066 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .pre-commit-config.yaml | 41 | args: ["--fix"] | COMMENT |
| LOW | tools/cli-cast/record-all.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tools/cli-cast/record.py | 61 | # through these rules. They are applied to the *bytes* as recorded, before the | COMMENT |
| LOW | tools/cli-cast/record.py | 81 | # machine and is pure noise in a golden. | COMMENT |
| LOW | tools/cli-cast/record.py | 181 | # Steps are intentionally few, because anything cleverer is a test framework | COMMENT |
| LOW | nix/cua-driver/compositor/cua_compositor_patch.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | nix/cua-driver/compositor/cua_compositor_patch.py | 41 | #include <errno.h> | COMMENT |
| LOW | tests/e2e/cua-sdk/ci-setup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/local-runtimes/tests/builtin_linux.rs | 1 | //! A Linux Space on the built-in Linux runtime, through the Spaces SDK the | COMMENT |
| LOW | tests/e2e/local-runtimes/tests/fleet_catalog.rs | 1 | //! Every Fleet catalog image, booted locally through the SDK | COMMENT |
| LOW | tests/e2e/local-runtimes/tests/fleet_catalog.rs | 21 | //! written to `CUA_E2E_FLEET_CATALOG_REPORT` (default | COMMENT |
| LOW | tests/e2e/local-runtimes/src/lib.rs | 1 | //! Shared helpers for the local-runtime e2e suite. | COMMENT |
| LOW | docs/public/scripts/openai-agents/run_openai_agents.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | docs/scripts/modal_app.py | 41 | image = ( | COMMENT |
| LOW | docs/scripts/modal_app.py | 621 | # 1. DOCUMENTATION DATABASES (from cua.ai/docs crawl): | COMMENT |
| LOW | docs/scripts/modal_app.py | 641 | # | COMMENT |
| LOW | …s/cua-driver/kwin-target-helper/kwin_target_helper.cpp | 1 | // SPDX-License-Identifier: MIT | COMMENT |
| LOW | …r/tools/cursor-gallery/motion-lab/motion/candidates.js | 1 | // Candidate motion styles for the Cua Driver agent cursor. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 1 | # This file was autogenerated by some hot garbage in the `uniffi` crate. | COMMENT |
| LOW | …s/cua-driver/python/src/cua_driver/_native_contract.py | 1 | # This file was autogenerated by some hot garbage in the `uniffi` crate. | COMMENT |
| LOW | …hyprland-plugin/tests/desktop_fault_policy_fixture.cpp | 1 | // Used by desktop_fault_policy_test.py, which inserts actual production bodies. | COMMENT |
| LOW | …bs/cua-driver/hyprland-plugin/tests/transport_test.cpp | 1 | #include "cua_hyprland/protocol.hpp" | COMMENT |
| LOW | libs/cua-driver/hyprland-plugin/tests/primary_grab.c | 1 | /* Independent foreground adversary. Build with the generated wlr virtual | COMMENT |
| LOW | …ugin/tests/cmake-api/include/src/plugins/PluginAPI.hpp | 1 | #pragma once | COMMENT |
| LOW | …ua-driver/hyprland-plugin/tests/mock-hyprland/mock.hpp | 1 | #pragma once | COMMENT |
| LOW | libs/cua-driver/hyprland-plugin/src/primary_trace.cpp | 1 | #include "primary_trace.hpp" | COMMENT |
| LOW | …bs/cua-driver/hyprland-plugin/src/input_experiment.cpp | 1 | // Independent-seat design adapted from Dillon DuPont's Hyprland prototype. | COMMENT |
| LOW | …bs/cua-driver/hyprland-plugin/src/input_experiment.cpp | 21 | #include <src/desktop/state/FocusState.hpp> | COMMENT |
| LOW | …bs/cua-driver/hyprland-plugin/src/input_experiment.cpp | 41 | #include <cerrno> | COMMENT |
| LOW | …bs/cua-driver/hyprland-plugin/src/input_experiment.cpp | 301 | keymap_text = std::move(text); | COMMENT |
| LOW | libs/cua-driver/hyprland-plugin/src/inject_server.cpp | 1 | #include "inject_server.hpp" | COMMENT |
| LOW | libs/cua-driver/hyprland-plugin/src/plugin.cpp | 1 | #include "inject_server.hpp" | COMMENT |
| LOW | libs/cua-driver/hyprland-plugin/src/plugin.cpp | 221 | #ifdef CUA_HYPRLAND_INPUT | COMMENT |
| LOW | …/cua-driver/hyprland-plugin/src/keymap_equivalence.hpp | 1 | #pragma once | COMMENT |
| LOW | libs/cua-driver/rust/crates/pip-preview/src/lib.rs | 1 | //! pip-preview — shared types + trait for the experimental | COMMENT |
| LOW | libs/cua-driver/rust/crates/pip-preview/src/lib.rs | 241 | cfg.geometry = cli.geometry; | COMMENT |
| LOW | …-driver/rust/crates/cua-driver-testkit/src/response.rs | 1 | //! Normalized tool response — the common shape both transports return. | COMMENT |
| LOW | …river/rust/crates/cua-driver-testkit/src/host_state.rs | 1 | //! Per-daemon isolation from the developer's real per-user state. | COMMENT |
| LOW | …river/rust/crates/cua-driver-testkit/src/host_state.rs | 21 | //! override instead. Known limitation: the Windows Computer History root | COMMENT |
| LOW | …s/cua-driver/rust/crates/cua-driver-testkit/src/lib.rs | 1 | //! Shared test harness for cua-driver integration tests. | COMMENT |
| LOW | …s/cua-driver/rust/crates/cua-driver-testkit/src/lib.rs | 21 | //! transport axis (CLI vs MCP) testable instead of MCP-only. | COMMENT |
| LOW | …er/rust/crates/cua-driver-testkit/src/boundary_fuzz.rs | 1 | //! Fuzz target bodies for the transport-free MCP tool-call boundary. | COMMENT |
| LOW | …ua-driver/rust/crates/cua-driver-testkit/src/daemon.rs | 181 | /// How far a single readiness probe progressed. | COMMENT |
| LOW | …s/cua-driver/rust/crates/cua-driver-testkit/src/mcp.rs | 81 | COMMENT | |
| LOW | libs/cua-driver/rust/crates/cua-driver/build.rs | 1 | // Bake Swift runtime rpaths into the cua-driver binary on macOS. | COMMENT |
| LOW | …r/rust/crates/cua-driver/tests/protocol_schema_test.rs | 1 | //! Pure `tools/list` schema-shape assertions. | COMMENT |
| LOW | …ust/crates/cua-driver/tests/schema_consistency_test.rs | 1 | //! Cross-platform tool-contract consistency gate. | COMMENT |
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 1 | //! Image / capture / recording tool tests. | COMMENT |
| LOW | …/cua-driver/tests/named_pipe_instance_recovery_test.rs | 1 | #![cfg(target_os = "windows")] | COMMENT |
| LOW | …/cua-driver/tests/testkit_host_state_isolation_test.rs | 1 | //! Regression coverage for #4094: testkit-owned daemons must not inherit the | COMMENT |
| LOW | …st/crates/cua-driver/tests/protocol_tools_call_test.rs | 1 | //! Per-tool `tools/call` integration tests. | COMMENT |
| LOW | …/rust/crates/cua-driver/tests/protocol_session_test.rs | 1 | //! Multi-client / multi-cursor / overlay session tests. | COMMENT |
| LOW | …ust/crates/cua-driver/tests/protocol_handshake_test.rs | 1 | //! MCP JSON-RPC tools/list roster and tool-error surface tests. | COMMENT |
| LOW | …/cua-driver/tests/transport_config_persistence_test.rs | 1 | //! Transport axis: CLI `set_config` visibility across daemon-backed shell | COMMENT |
| LOW | libs/cua-driver/rust/crates/cua-driver/src/autostart.rs | 1 | //! `cua-driver autostart {enable|disable|status|kick}` — register / inspect / | COMMENT |
| LOW | libs/cua-driver/rust/crates/cua-driver/src/autostart.rs | 21 | //! `ITaskFolder`, `IPrincipal`, ...) is ~10 nested COM-wrapper calls in | COMMENT |
| LOW | libs/cua-driver/rust/crates/cua-driver/src/autostart.rs | 41 | "cua-driver-serve" | COMMENT |
| LOW | libs/cua-driver/rust/crates/cua-driver/src/autostart.rs | 161 | platform::kick() | COMMENT |
| LOW | libs/cua-driver/rust/crates/cua-driver/src/autostart.rs | 181 | let resolved = exe; | COMMENT |
| LOW | libs/cua-driver/rust/crates/cua-driver/src/autostart.rs | 221 | /// **Every failure path must exit non-zero.** The original one-liner was | COMMENT |
| 3547 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/cli-cast/scrub.py | 12 | CODE | |
| LOW | tools/cli-cast/record.py | 33 | CODE | |
| LOW | tests/test_image_builder.py | 12 | CODE | |
| LOW | tests/android_rps_benchmark_local.py | 11 | CODE | |
| LOW | tests/android_rps_benchmark.py | 11 | CODE | |
| LOW | tests/android_rps_benchmark.py | 17 | CODE | |
| LOW | tests/test_image_builder_cloud.py | 11 | CODE | |
| LOW | tests/test_interfaces.py | 34 | CODE | |
| LOW | tests/integration/sandbox_cli/conftest.py | 3 | CODE | |
| LOW | …/integration/sandbox_cli/test_linux_local_container.py | 11 | CODE | |
| LOW | tests/integration/sandbox_cli/test_android_cloud_vm.py | 12 | CODE | |
| LOW | tests/integration/sandbox_cli/test_android_local_vm.py | 12 | CODE | |
| LOW | …ntegration/sandbox_cli/test_macos_local_registry_vm.py | 12 | CODE | |
| LOW | …/integration/sandbox_cli/test_linux_cloud_container.py | 12 | CODE | |
| LOW | …ntegration/sandbox_cli/test_linux_local_registry_vm.py | 13 | CODE | |
| LOW | tests/integration/sandbox_cli/test_android_local_cdp.py | 16 | CODE | |
| LOW | tests/integration/sandbox_cli/test_macos_local_vm.py | 12 | CODE | |
| LOW | tests/integration/sandbox_cli/test_linux_cloud_vm.py | 12 | CODE | |
| LOW | tests/integration/sandbox_cli/test_macos_cloud_vm.py | 12 | CODE | |
| LOW | tests/integration/sandbox_cli/test_linux_local_vm.py | 11 | CODE | |
| LOW | tests/integration/sandbox_cli/test_windows_cloud_vm.py | 12 | CODE | |
| LOW | tests/integration/sandbox_cli/test_windows_local_vm.py | 12 | CODE | |
| LOW | …/integration/sandbox_sdk/test_linux_local_container.py | 17 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_android_cloud_vm.py | 21 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_android_local_vm.py | 22 | CODE | |
| LOW | …ntegration/sandbox_sdk/test_macos_local_registry_vm.py | 19 | CODE | |
| LOW | …integration/sandbox_sdk/test_linux_local_osworld_vm.py | 22 | CODE | |
| LOW | …/integration/sandbox_sdk/test_linux_cloud_container.py | 16 | CODE | |
| LOW | …ntegration/sandbox_sdk/test_linux_local_registry_vm.py | 20 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_macos_local_vm.py | 15 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_linux_cloud_vm.py | 16 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_macos_cloud_vm.py | 15 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_linux_local_vm.py | 17 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_windows_cloud_vm.py | 18 | CODE | |
| LOW | tests/integration/sandbox_sdk/test_windows_local_vm.py | 19 | CODE | |
| LOW | …/integration/sandbox_sdk/test_android_local_gym_pwa.py | 21 | CODE | |
| LOW | tests/e2e/cua-sdk/run.py | 23 | CODE | |
| LOW | tests/e2e/cua-sdk/fleet_gateway_conformance.py | 26 | CODE | |
| LOW | tests/e2e/cua-sdk/test_run_janitor.py | 6 | CODE | |
| LOW | …s/e2e/cua-sdk/test_fleet_gateway_conformance_bearer.py | 10 | CODE | |
| LOW | tests/e2e/cua-sdk/python/conftest.py | 8 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_fleet_guides.py | 17 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_images.py | 15 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_unified_api.py | 20 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_daemon_agnostic.py | 8 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_docs_blocks.py | 34 | CODE | |
| LOW | tests/e2e/cua-sdk/python/e2e.py | 15 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_daemon_vs_embedded.py | 10 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_browse.py | 16 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_local_vm.py | 11 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_sandbox_parity.py | 20 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_direct_connect.py | 8 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_desktop.py | 16 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_cua_sandbox_guides.py | 10 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/test_config_lane.py | 3 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/test_coverage.py | 3 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/cli_shape.py | 20 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/test_preludes.py | 11 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/config_lane.py | 16 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/compile_lane.py | 17 | CODE | |
| 1587 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | tools/cli-cast/record.py | 366 | except ProcessLookupError: | CODE |
| HIGH | tools/cli-cast/record.py | 362 | except OSError: | CODE |
| HIGH | tests/android_rps_benchmark.py | 487 | except FileNotFoundError: | CODE |
| HIGH | tests/integration/sandbox_cli/test_android_local_cdp.py | 61 | except Exception: | CODE |
| HIGH | tests/e2e/cua-sdk/fleet_gateway_conformance.py | 152 | except OSError: | CODE |
| HIGH | tests/e2e/cua-sdk/fleet_gateway_conformance.py | 216 | except OSError: | CODE |
| HIGH | tests/e2e/cua-sdk/python/test_daemon_agnostic.py | 185 | except cua.CuaError.NotFound: | CODE |
| HIGH | tests/e2e/cua-sdk/python/test_docs_blocks.py | 457 | except cua.CuaError: | CODE |
| HIGH | tests/e2e/cua-sdk/python/test_desktop.py | 110 | except cua.CuaError.NotFound: | CODE |
| HIGH | docs/public/examples/local-models/cua-mcp-filter.py | 127 | except (BrokenPipeError, OSError): | CODE |
| HIGH | docs/public/examples/local-models/cua-mcp-filter.py | 132 | except OSError: | CODE |
| HIGH | docs/public/examples/local-models/cua-mcp-filter.py | 165 | except (json.JSONDecodeError, AttributeError, TypeError): | CODE |
| HIGH | docs/public/examples/local-models/cua-mcp-filter.py | 123 | except (json.JSONDecodeError, AttributeError): | CODE |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 2374 | except RuntimeError: | CODE |
| HIGH | …-driver/hyprland-plugin/proofs/production_app_smoke.py | 556 | except Exception: | CODE |
| HIGH | …prland-plugin/proofs/production_desktop_fault_proof.py | 505 | except BrokenPipeError: | CODE |
| HIGH | …bs/cua-driver/hyprland-plugin/proofs/production_mcp.py | 46 | except (BrokenPipeError, OSError): | CODE |
| HIGH | …prland-plugin/proofs/production_session_fault_proof.py | 381 | except BrokenPipeError: | CODE |
| HIGH | libs/cua-driver/hyprland-plugin/tests/realapp_proof.py | 346 | except (OSError, RuntimeError): pass | CODE |
| HIGH | …/cua-driver/hyprland-plugin/tests/driver_input_live.py | 211 | except OSError: | CODE |
| HIGH | libs/cua-driver/hyprland-plugin/tests/desktop_faults.py | 331 | except BrokenPipeError: | CODE |
| HIGH | …ua-driver/hyprland-plugin/tests/retirement_evidence.py | 100 | except ConnectionResetError: | CODE |
| HIGH | …r/rust/crates/cua-perception/scripts/quality_runner.py | 613 | except Exception: | CODE |
| HIGH | …r/rust/crates/cua-perception/scripts/quality_runner.py | 1084 | except Exception: | CODE |
| HIGH | …r/rust/crates/cua-perception/scripts/quality_runner.py | 701 | except Exception: | CODE |
| HIGH | …r/rust/crates/cua-perception/scripts/quality_runner.py | 899 | except Exception: | CODE |
| HIGH | libs/cua-driver/examples/jev-use/fixture_server.py | 129 | except KeyboardInterrupt: | CODE |
| HIGH | …ua-driver/examples/jev-use/verify_session_isolation.py | 374 | except Exception: | CODE |
| HIGH | …ua-driver/examples/jev-use/verify_session_isolation.py | 380 | except Exception: | CODE |
| HIGH | libs/cua-driver/examples/agent-sdks/fixture_server.py | 134 | except KeyboardInterrupt: | CODE |
| HIGH | libs/cua-s1/python/src/cua_s1/driver.py | 550 | except Exception: | CODE |
| HIGH | libs/cua-s1/training/train_4b_rl.py | 540 | except Exception: # noqa: BLE001 - a memory readout must never fail a run | CODE |
| HIGH | libs/cuabot/src/mcp/overlay-cursor.py | 594 | except KeyboardInterrupt: | CODE |
| HIGH | libs/cuabot/src/mcp/overlay-cursor.py | 486 | except OSError: | CODE |
| HIGH | libs/cuabot/src/mcp/overlay-cursor.py | 600 | except: | CODE |
| HIGH | libs/cuabot/src/mcp/overlay-cursor.py | 576 | except: | CODE |
| HIGH | libs/cuabot/src/mcp/overlay-cursor.py | 507 | except json.JSONDecodeError: | CODE |
| HIGH | libs/cuabot/src/mcp/computer-use-mcp.py | 71 | except Exception: | CODE |
| HIGH | libs/python/core/cua_core/telemetry/posthog.py | 197 | except Exception: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/sandbox_state.py | 118 | except (json.JSONDecodeError, OSError): | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 763 | except Exception: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/_autopool.py | 677 | except Exception: # noqa: BLE001 - the TTL reaps it | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/_config.py | 182 | except FileNotFoundError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/_auth.py | 73 | except OSError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/env.py | 266 | except Exception: # noqa: BLE001 - best effort on teardown | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/env.py | 272 | except Exception: # noqa: BLE001 | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/env.py | 447 | except NotImplementedError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/vncssh.py | 94 | except Exception: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/vncssh.py | 106 | except Exception: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/qmp.py | 138 | except Exception: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/vnc.py | 62 | except Exception: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/transport/vnc.py | 74 | except Exception: | CODE |
| HIGH | …on/cua-sandbox/cua_sandbox/runtime/android_emulator.py | 58 | except (subprocess.SubprocessError, FileNotFoundError): | CODE |
| HIGH | …on/cua-sandbox/cua_sandbox/runtime/android_emulator.py | 882 | except Exception: | CODE |
| HIGH | …on/cua-sandbox/cua_sandbox/runtime/android_emulator.py | 850 | except FileNotFoundError: | CODE |
| HIGH | …thon/cua-sandbox/cua_sandbox/runtime/qemu_installer.py | 143 | except OSError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/runtime/native.py | 351 | except OSError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py | 340 | except RuntimeError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py | 247 | except RuntimeError: | CODE |
| HIGH | libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py | 251 | except RuntimeError: | CODE |
| 228 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/cli-cast/record.py | 173 | except Exception as exc: # noqa: BLE001 - recording must not fail on this | CODE |
| LOW | tools/cli-cast/record.py | 252 | except Exception: | CODE |
| LOW | tests/android_rps_benchmark_local.py | 184 | except Exception as e: | CODE |
| LOW | tests/cold_start_benchmark.py | 34 | except Exception as e: | CODE |
| LOW | tests/android_rps_benchmark.py | 194 | except Exception as e: | CODE |
| LOW | tests/android_rps_benchmark.py | 427 | except Exception as e: | STRING |
| LOW | tests/integration/sandbox_cli/test_android_local_vm.py | 31 | except Exception: | CODE |
| LOW | tests/integration/sandbox_cli/test_android_local_cdp.py | 35 | except Exception: | CODE |
| LOW | tests/integration/sandbox_cli/test_android_local_cdp.py | 61 | except Exception: | CODE |
| LOW | tests/integration/sandbox_cli/test_windows_local_vm.py | 35 | except Exception: | CODE |
| MEDIUM | tests/integration/sandbox_cli/test_windows_local_vm.py | 29 | def _has_qemu() -> bool: | CODE |
| LOW | tests/integration/sandbox_sdk/test_android_local_vm.py | 40 | except Exception: | CODE |
| MEDIUM | tests/integration/sandbox_sdk/test_android_local_vm.py | 32 | def _has_android_sdk() -> bool: | CODE |
| LOW | …integration/sandbox_sdk/test_linux_local_osworld_vm.py | 50 | except Exception: | CODE |
| MEDIUM | …integration/sandbox_sdk/test_linux_local_osworld_vm.py | 44 | def _has_qemu() -> bool: | CODE |
| LOW | tests/integration/sandbox_sdk/test_windows_local_vm.py | 38 | except Exception: | CODE |
| MEDIUM | tests/integration/sandbox_sdk/test_windows_local_vm.py | 32 | def _has_qemu() -> bool: | CODE |
| LOW⚡ | …/integration/sandbox_sdk/test_android_local_gym_pwa.py | 53 | except Exception: | CODE |
| MEDIUM | …/integration/sandbox_sdk/test_android_local_gym_pwa.py | 47 | def _has_java() -> bool: | CODE |
| LOW | tests/agent_loop_testing/agent_test_uitars.py | 182 | except Exception as e: | CODE |
| LOW | tests/agent_loop_testing/agent_test.py | 193 | except Exception as e: | CODE |
| LOW | tests/e2e/cua-sdk/fleet_gateway_conformance.py | 126 | except Exception as e: # keep the old bearer; retry shortly | CODE |
| LOW | tests/e2e/cua-sdk/python/e2e.py | 161 | except Exception as error: # noqa: BLE001 - binding missing or too old | CODE |
| LOW | tests/e2e/cua-sdk/docs/config_lane.py | 100 | except Exception as e: # noqa: BLE001 - any parse error is the finding | CODE |
| LOW | tests/e2e/cua-sdk/docs/config_lane.py | 119 | except Exception: # noqa: BLE001 | CODE |
| LOW | tests/e2e/cua-sdk/docs/preludes/local-cleanup.py | 37 | except Exception as _e: # noqa: BLE001 - best effort, reported | CODE |
| LOW | tests/e2e/omarchy/omarchy_e2e.py | 86 | except Exception as e: # noqa: BLE001 - keep polling; report the last error | CODE |
| LOW | tests/e2e/omarchy/omarchy_e2e.py | 98 | except Exception as e: # noqa: BLE001 | CODE |
| LOW | docs/public/scripts/openai-agents/run_openai_agents.py | 103 | except Exception: | CODE |
| LOW | docs/public/scripts/openai-agents/run_openai_agents.py | 485 | except Exception: | STRING |
| LOW⚡ | docs/public/scripts/openai-agents/run_openai_agents.py | 561 | except Exception as error: | STRING |
| LOW⚡ | docs/public/scripts/openai-agents/run_openai_agents.py | 565 | except Exception as error: | STRING |
| LOW⚡ | docs/public/scripts/openai-agents/run_openai_agents.py | 570 | except Exception as error: | STRING |
| LOW | docs/public/scripts/openai-agents/run_openai_agents.py | 717 | except Exception as error: | STRING |
| LOW | docs/scripts/verify-driver-first-run-linux.py | 396 | except Exception as error: | CODE |
| MEDIUM | docs/scripts/modal_app.py | 424 | print(f"Error crawling {url}: {e}") | CODE |
| LOW | docs/scripts/modal_app.py | 423 | except Exception as e: | CODE |
| MEDIUM | docs/scripts/modal_app.py | 1048 | print(f"Error during parallel indexing: {e}") | STRING |
| LOW | docs/scripts/modal_app.py | 1529 | except Exception as e: | CODE |
| LOW | docs/scripts/modal_app.py | 1642 | except Exception as e: | CODE |
| LOW | docs/scripts/modal_app.py | 1653 | except Exception as e: | CODE |
| LOW | docs/scripts/modal_app.py | 1046 | except Exception as e: | STRING |
| LOW | docs/scripts/modal_app.py | 1240 | except Exception as e: | STRING |
| LOW | docs/scripts/crawl_docs.py | 290 | except Exception as e: | CODE |
| MEDIUM | docs/scripts/crawl_docs.py | 291 | print(f"Error crawling {url}: {e}") | CODE |
| LOW | docs/scripts/docs-mcp-server/docs_index.py | 203 | except Exception: | STRING |
| LOW | docs/scripts/docs-mcp-server/docs_index.py | 356 | except Exception as error: | CODE |
| LOW | docs/scripts/docs-mcp-server/sync_docs_index.py | 63 | except Exception as error: | CODE |
| LOW | docs/scripts/docs-mcp-server/sync_docs_index.py | 181 | except Exception as error: | CODE |
| LOW | docs/scripts/docs-mcp-server/sync_docs_index.py | 312 | except Exception as error: | CODE |
| MEDIUM | docs/scripts/docs-mcp-server/sync_docs_index.py | 194 | def _install(stage, target, manifest): | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 100 | except Exception as e: | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 184 | except Exception as e: | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 195 | except Exception as e: | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 278 | except Exception: | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 338 | except Exception: | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 401 | except Exception: | CODE |
| LOW | docs/scripts/docs-mcp-server/main.py | 469 | except Exception: | CODE |
| LOW | blog/sandboxed-python-execution.md | 148 | except Exception as e: | CODE |
| LOW | blog/sandboxed-python-execution.md | 170 | except Exception as e: | CODE |
| 1043 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | nix/cua-driver/compositor/cua_compositor_patch.py | 301 | if (!node || node->type != WLR_SCENE_NODE_BUFFER) return false; | CODE |
| HIGH⚡ | nix/cua-driver/compositor/cua_compositor_patch.py | 307 | if (!sc || wl_list_empty(&sc->pointers)) { | CODE |
| HIGH⚡ | nix/cua-driver/compositor/cua_compositor_patch.py | 314 | if (!sc || wl_list_empty(&sc->pointers)) return false; | CODE |
| HIGH⚡ | nix/cua-driver/compositor/cua_compositor_patch.py | 543 | if (end && !*end && fn >= 1 && fn <= 10) kc = KEY_F1 + (uint32_t)fn - 1; | CODE |
| HIGH⚡ | nix/cua-driver/compositor/cua_compositor_patch.py | 544 | else if (end && !*end && fn == 11) kc = KEY_F11; | CODE |
| HIGH⚡ | nix/cua-driver/compositor/cua_compositor_patch.py | 545 | else if (end && !*end && fn == 12) kc = KEY_F12; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 153 | if (pid <= 0 || root_pid <= 0) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 154 | for (int depth = 0; depth < 64 && pid > 1; depth++) { | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 168 | if (!close || sscanf(close + 2, "%c %ld", &state, &parent) != 2 || | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 169 | parent <= 0 || parent == pid) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 205 | if (a && strcmp(a, app_id) == 0) { found = t; matches++; } | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 224 | if (target_pid > 0 && cua_toplevel_pid(t) == target_pid) { | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 245 | if (target_pid > 0 && cua_toplevel_pid(t) == target_pid) target = t; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 290 | if (!t || idx < 0 || idx >= CUA_MAXDEV) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 352 | if (!sc || wl_list_empty(&sc->pointers)) return NULL; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 364 | if (!t || idx < 0 || idx >= CUA_MAXDEV) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 369 | if (!sc || wl_list_empty(&sc->pointers)) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 387 | if (!t || idx < 0 || idx >= CUA_MAXDEV) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 390 | if (!sc || wl_list_empty(&sc->pointers)) return false; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 435 | if (cp > 0 && cp < 128 && !g_chartab[cp].valid) { | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 460 | if (!sc || wl_list_empty(&sc->keyboards)) return NULL; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 462 | if (focused && wlr_surface_get_root_surface(focused) == surface) { | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 564 | if (!kc && key[0] && !key[1]) { | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 566 | if (cp < 128 && g_chartab[cp].valid) kc = g_chartab[cp].keycode; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 666 | if (nl > p && nl[-1] == '\r') nl[-1] = 0; | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 736 | if (bind(fd, (struct sockaddr *)&addr, sizeof addr) < 0 || listen(fd, 4) < 0) { | CODE |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 773 | "\tif (!toplevel->cua_initial_activation_sent && prev_surface) {\n" | STRING |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 819 | "\t\tif (cua_ptr[i].entered && wlr_surface_get_root_surface(cua_ptr[i].entered) == cua_surface) cua_ptr[i].entered = | STRING |
| HIGH | nix/cua-driver/compositor/cua_compositor_patch.py | 820 | "\t\tif (cua_kbd_state[i].entered && wlr_surface_get_root_surface(cua_kbd_state[i].entered) == cua_surface) cua_kbd_ | STRING |
| HIGH | tests/test_image_builder.py | 48 | out = await _run(image, "curl --version && wget --version") | CODE |
| HIGH | tests/test_image_builder.py | 53 | out = await _run(image, "curl --version && wget --version") | CODE |
| HIGH | tests/test_image_builder.py | 101 | out = await _run(image, "test -d /opt/myapp && echo exists") | CODE |
| HIGH | tests/test_image_builder.py | 216 | out = await _run(image, "jq --version && wget --version") | CODE |
| HIGH | tests/e2e/cua-sdk/fleet_gateway_conformance.py | 160 | f"mkdir -p /etc/cua && printf %s {token} >/etc/cua/env-token && " | CODE |
| HIGH | tests/e2e/cua-sdk/python/test_images.py | 44 | "command": f"mkdir -p /opt/cua-e2e && echo {marker} > /opt/cua-e2e/marker", | CODE |
| HIGH | tests/e2e/cua-sdk/python/e2e.py | 102 | f"mkdir -p /etc/cua && printf %s {token} >/etc/cua/env-token && " | CODE |
| HIGH | tests/e2e/cua-sdk/python/e2e.py | 535 | 'xdotool windowactivate --sync "$wid" >/dev/null 2>&1 || true; xdotool windowraise "$wid"; ' | CODE |
| HIGH | tests/e2e/cua-sdk/docs/cli_shape.py | 104 | """``a | b && c; d`` -> [[a...], [b...], [c...], [d...]] (redirections dropped).""" | STRING |
| HIGH | tests/e2e/cua-sdk/docs/test_preludes.py | 123 | live.push(options.name); | CODE |
| HIGH | tests/e2e/cua-sdk/docs/test_preludes.py | 131 | deleted.push(name); | CODE |
| HIGH | tests/e2e/cua-sdk/docs/test_cli_shape.py | 105 | "echo hi && cua sb create linux; cua sb --help", | CODE |
| HIGH | tests/e2e/browse/e2e_browse.py | 178 | f" for i in $(seq 1 50); do curl -sf 127.0.0.1:{FORM_PORT}/ >/dev/null && break; sleep 0.2; done | CODE |
| HIGH | tests/e2e/omarchy/omarchy_e2e.py | 672 | 'grep -q token-sync /proc/$p/cmdline || echo "cua-spacesd $p"; done; }; ' | CODE |
| HIGH | docs/public/scripts/openai-agents/run_openai_agents.py | 390 | "(sudo apt-get update -q && sudo apt-get install -y -q nodejs npm)", | STRING |
| HIGH | docs/public/scripts/openai-agents/run_openai_agents.py | 469 | f"pid=$(cat {shlex.quote(EXECUTOR_PID_PATH)} 2>/dev/null || true); " | STRING |
| HIGH | docs/public/scripts/openai-agents/run_openai_agents.py | 471 | "elif ! kill -0 \"$pid\" 2>/dev/null; then echo EXITED; " | STRING |
| HIGH⚡ | docs/public/scripts/openai-agents/run_openai_agents.py | 517 | "kill \"$pid\" 2>/dev/null || true; " | STRING |
| HIGH⚡ | docs/public/scripts/openai-agents/run_openai_agents.py | 519 | "kill -0 \"$pid\" 2>/dev/null || exit 0; sleep 1; done; " | STRING |
| HIGH⚡ | docs/public/scripts/openai-agents/run_openai_agents.py | 520 | "kill -KILL \"$pid\" 2>/dev/null || true; fi", | STRING |
| HIGH⚡ | libs/cua-driver/python/tests/test_remote_channel.py | 132 | result = await self.driver.call_tool("health_report", '{"sample":null}') | CODE |
| HIGH⚡ | …iver/hyprland-plugin/packaging/release/test_release.py | 371 | test "$1" = --test-dir && test "$3" = --output-on-failure && test "$4" = --no-tests=error || exit 92 | CODE |
| HIGH⚡ | …iver/hyprland-plugin/packaging/release/test_release.py | 371 | test "$1" = --test-dir && test "$3" = --output-on-failure && test "$4" = --no-tests=error || exit 92 | CODE |
| HIGH | …iver/hyprland-plugin/packaging/release/test_release.py | 331 | if command -v ginstall >/dev/null; then | CODE |
| HIGH | …iver/hyprland-plugin/packaging/release/test_release.py | 334 | package || exit 1 | CODE |
| HIGH | …ver/hyprland-plugin/packaging/release/test_workflow.py | 42 | self.assertIn("ref: ${{ inputs.source_ref || github.ref }}", self.job) | CODE |
| HIGH | …nd-plugin/packaging/release/profile_download_recipe.py | 165 | " _verify_download check || return 1\n") | STRING |
| HIGH | …nd-plugin/packaging/release/profile_download_recipe.py | 167 | "prepare() {\n _verify_download extract || return 1\n _verify\n}") | STRING |
| HIGH | …ver/hyprland-plugin/tests/desktop_fault_policy_test.py | 34 | ('action_refusal', 'const auto sequence = number(f[1]);', 'if (lease && Clock::now() >= expires)'), | CODE |
| HIGH | …ver/hyprland-plugin/tests/foreground_modifiers_test.py | 179 | check(num != 0 && caps != 0, "lock encodings unresolved"); | CODE |
| HIGH | …ver/hyprland-plugin/tests/foreground_modifiers_test.py | 187 | check(lane.foreground_started && lane.foreground_modifiers[2] == num, | CODE |
| 133 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | context-manger to allocate a buffer using a _uniffirustbufferbuilder. the allocated buffer will be automatically freed i | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | context-manger to allocate a buffer using a _uniffirustbufferbuilder. the allocated buffer will be automatically freed i | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | context-manger to allocate a buffer using a _uniffirustbufferbuilder. the allocated buffer will be automatically freed i | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | context-manger to allocate a buffer using a _uniffirustbufferbuilder. the allocated buffer will be automatically freed i | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | context-manager to consume a buffer using a _uniffirustbufferstream. the _uniffirustbuffer will be freed once the contex | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | context-manager to consume a buffer using a _uniffirustbufferstream. the _uniffirustbuffer will be freed once the contex | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | context-manager to consume a buffer using a _uniffirustbufferstream. the _uniffirustbuffer will be freed once the contex | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | context-manager to consume a buffer using a _uniffirustbufferstream. the _uniffirustbuffer will be freed once the contex | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | context-manager to read a buffer using a _uniffirustbufferstream. this is like consume_with_stream, but doesn't free the | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | context-manager to read a buffer using a _uniffirustbufferstream. this is like consume_with_stream, but doesn't free the | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | context-manager to read a buffer using a _uniffirustbufferstream. this is like consume_with_stream, but doesn't free the | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | context-manager to read a buffer using a _uniffirustbufferstream. this is like consume_with_stream, but doesn't free the | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | helper for structured reading of bytes from a _uniffirustbuffer | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | helper for structured reading of bytes from a _uniffirustbuffer | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | helper for structured reading of bytes from a _uniffirustbuffer | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | helper for structured reading of bytes from a _uniffirustbuffer | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | helper for structured writing of bytes into a _uniffirustbuffer. | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | helper for structured writing of bytes into a _uniffirustbuffer. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | helper for structured writing of bytes into a _uniffirustbuffer. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | helper for structured writing of bytes into a _uniffirustbuffer. | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | a map where inserting, getting and removing data is synchronized with a lock. | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | a map where inserting, getting and removing data is synchronized with a lock. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | a map where inserting, getting and removing data is synchronized with a lock. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | a map where inserting, getting and removing data is synchronized with a lock. | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | low-level insert, this assumes `self._lock` is held. | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | low-level insert, this assumes `self._lock` is held. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | low-level insert, this assumes `self._lock` is held. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | low-level insert, this assumes `self._lock` is held. | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | function pointer for a rust task, which a callback function that takes a opaque pointer | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | function pointer for a rust task, which a callback function that takes a opaque pointer | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | function pointer for a rust task, which a callback function that takes a opaque pointer | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | function pointer for a rust task, which a callback function that takes a opaque pointer | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | factory function to create callback function types for async functions | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | factory function to create callback function types for async functions | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | factory function to create callback function types for async functions | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | factory function to create callback function types for async functions | STRING |
| HIGH | libs/cua-driver/python/src/cua_driver/_native.py | 0 | this is how we find and load the dynamic library provided by the component. for now we just look it up by name. | STRING |
| HIGH | …s/cua-driver/python/src/cua_driver/_native_contract.py | 0 | this is how we find and load the dynamic library provided by the component. for now we just look it up by name. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 0 | this is how we find and load the dynamic library provided by the component. for now we just look it up by name. | STRING |
| HIGH | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 0 | this is how we find and load the dynamic library provided by the component. for now we just look it up by name. | STRING |
| HIGH | libs/python/agent/benchmarks/contrib.md | 0 | predict click coordinates for the given image and instruction. args: image: pil image to analyze instruction: text instr | STRING |
| HIGH | libs/python/agent/benchmarks/models/gta1.py | 0 | predict click coordinates for the given image and instruction. args: image: pil image to analyze instruction: text instr | STRING |
| HIGH | libs/python/agent/benchmarks/models/base.py | 0 | predict click coordinates for the given image and instruction. args: image: pil image to analyze instruction: text instr | STRING |
| HIGH | libs/python/agent/cua_agent/integrations/hud/agent.py | 0 | you are a ui grounding expert. follow these guidelines: 1. never ask for confirmation. complete all tasks autonomously. | STRING |
| HIGH | libs/python/agent/cua_agent/loops/openai.py | 0 | you are a ui grounding expert. follow these guidelines: 1. never ask for confirmation. complete all tasks autonomously. | STRING |
| HIGH | libs/python/agent/cua_agent/loops/anthropic.py | 0 | you are a ui grounding expert. follow these guidelines: 1. never ask for confirmation. complete all tasks autonomously. | STRING |
| HIGH | libs/python/agent/cua_agent/loops/opencua.py | 0 | predict click coordinates using ui-ins model via litellm.acompletion. args: model: the ui-ins model name image_b64: base | STRING |
| HIGH | libs/python/agent/cua_agent/loops/gta1.py | 0 | predict click coordinates using ui-ins model via litellm.acompletion. args: model: the ui-ins model name image_b64: base | STRING |
| HIGH | libs/python/agent/cua_agent/loops/gelato.py | 0 | predict click coordinates using ui-ins model via litellm.acompletion. args: model: the ui-ins model name image_b64: base | STRING |
| HIGH | libs/python/agent/cua_agent/loops/uiins.py | 0 | predict click coordinates using ui-ins model via litellm.acompletion. args: model: the ui-ins model name image_b64: base | STRING |
| HIGH | libs/python/agent/cua_agent/loops/uitars.py | 0 | get list of capabilities supported by this agent config. returns: list of capability strings | STRING |
| HIGH | libs/python/agent/cua_agent/loops/openai.py | 0 | get list of capabilities supported by this agent config. returns: list of capability strings | STRING |
| HIGH | libs/python/agent/cua_agent/loops/glm45v.py | 0 | get list of capabilities supported by this agent config. returns: list of capability strings | STRING |
| HIGH | libs/python/agent/cua_agent/loops/qwen35.py | 0 | coordinates appear in 0..1000 space, scale to actual screen size using dims if provided. | STRING |
| HIGH | libs/python/agent/cua_agent/loops/generic_vlm.py | 0 | coordinates appear in 0..1000 space, scale to actual screen size using dims if provided. | STRING |
| HIGH | libs/python/agent/cua_agent/loops/fara/helpers.py | 0 | coordinates appear in 0..1000 space, scale to actual screen size using dims if provided. | STRING |
| HIGH | libs/python/agent/cua_agent/loops/qwen35.py | 0 | convert qwen computer tool arguments to the computer calls action schema. qwen (example): {"action": "left_click", "coor | STRING |
| HIGH | libs/python/agent/cua_agent/loops/generic_vlm.py | 0 | convert qwen computer tool arguments to the computer calls action schema. qwen (example): {"action": "left_click", "coor | STRING |
| HIGH | libs/python/agent/cua_agent/loops/fara/helpers.py | 0 | convert qwen computer tool arguments to the computer calls action schema. qwen (example): {"action": "left_click", "coor | STRING |
| HIGH | libs/python/agent/cua_agent/loops/qwen35.py | 0 | predict click coordinates using qwen3-vl via litellm.acompletion. only exposes a reduced tool schema with left_click to | STRING |
| 66 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tools/cli-cast/record.py | 316 | CODE | |
| LOW | tests/cold_start_benchmark.py | 54 | CODE | |
| LOW | tests/integration/sandbox_cli/test_android_local_cdp.py | 50 | CODE | |
| LOW | tests/agent_loop_testing/agent_test_uitars.py | 111 | CODE | |
| LOW | tests/agent_loop_testing/agent_test.py | 127 | CODE | |
| LOW | tests/e2e/cua-sdk/run.py | 124 | CODE | |
| LOW | tests/e2e/cua-sdk/run.py | 183 | CODE | |
| LOW | tests/e2e/cua-sdk/run.py | 207 | CODE | |
| LOW | tests/e2e/cua-sdk/run.py | 258 | CODE | |
| LOW | tests/e2e/cua-sdk/fleet_gateway_conformance.py | 165 | CODE | |
| LOW | tests/e2e/cua-sdk/python/test_docs_blocks.py | 290 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/cli_shape.py | 60 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/cli_shape.py | 219 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/cli_shape.py | 434 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/config_lane.py | 32 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/coverage.py | 46 | CODE | |
| LOW | tests/e2e/cua-sdk/docs/extract.py | 268 | CODE | |
| LOW | tests/e2e/omarchy/omarchy_e2e.py | 140 | CODE | |
| LOW | docs/public/examples/local-models/cua-mcp-filter.py | 92 | CODE | |
| LOW | docs/public/examples/local-models/cua-mcp-filter.py | 110 | CODE | |
| LOW | docs/public/scripts/openai-agents/run_openai_agents.py | 575 | CODE | |
| LOW | docs/public/scripts/openai-agents/run_openai_agents.py | 271 | CODE | |
| LOW | docs/scripts/verify-driver-first-run-linux.py | 209 | CODE | |
| LOW | docs/scripts/modal_app.py | 222 | CODE | |
| LOW | docs/scripts/modal_app.py | 275 | CODE | |
| LOW | docs/scripts/modal_app.py | 761 | CODE | |
| LOW | docs/scripts/modal_app.py | 1275 | CODE | |
| LOW | docs/scripts/modal_app.py | 229 | CODE | |
| LOW | docs/scripts/crawl_docs.py | 217 | CODE | |
| LOW | docs/scripts/crawl_docs.py | 309 | CODE | |
| LOW | docs/scripts/tests/test_sandbox_secret_example.py | 89 | CODE | |
| LOW | docs/scripts/docs-mcp-server/docs_index.py | 56 | CODE | |
| LOW | docs/scripts/docs-mcp-server/main.py | 286 | CODE | |
| LOW | docs/scripts/docs-mcp-server/main.py | 409 | CODE | |
| LOW | libs/cua-driver/python/build_wheel.py | 37 | CODE | |
| LOW | libs/cua-driver/python/build_wheel.py | 136 | CODE | |
| LOW | libs/cua-driver/python/build_wheel.py | 162 | CODE | |
| LOW | libs/cua-driver/python/build_wheel.py | 196 | CODE | |
| LOW | libs/cua-driver/python/build_wheel.py | 243 | CODE | |
| LOW | libs/cua-driver/python/tests/test_fleet.py | 177 | CODE | |
| LOW | libs/cua-driver/python/tests/test_fleet.py | 182 | CODE | |
| LOW | libs/cua-driver/python/tests/test_fleet.py | 186 | CODE | |
| LOW | libs/cua-driver/python/tests/test_uniffi_loader.py | 177 | CODE | |
| LOW | libs/cua-driver/python/tests/test_uniffi_loader.py | 213 | CODE | |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 299 | CODE | |
| LOW | …s/cua-driver/python/src/cua_driver/_native_contract.py | 297 | CODE | |
| LOW | …rland-plugin/packaging/release/test_profile_release.py | 138 | CODE | |
| LOW | …ugin/packaging/release/test_profile_download_recipe.py | 116 | CODE | |
| LOW | …r/hyprland-plugin/proofs/production_handshake_probe.py | 155 | CODE | |
| LOW | …ver/hyprland-plugin/proofs/primary_observer_fixture.py | 23 | CODE | |
| LOW | …ver/hyprland-plugin/proofs/primary_observer_fixture.py | 110 | CODE | |
| LOW | …-driver/hyprland-plugin/proofs/production_app_smoke.py | 78 | CODE | |
| LOW | …-driver/hyprland-plugin/proofs/production_app_smoke.py | 474 | CODE | |
| LOW | …-driver/hyprland-plugin/proofs/production_app_smoke.py | 698 | CODE | |
| LOW | …-driver/hyprland-plugin/proofs/production_app_smoke.py | 746 | CODE | |
| LOW | …ver/hyprland-plugin/proofs/production_realapp_proof.py | 54 | CODE | |
| LOW | …ver/hyprland-plugin/proofs/production_realapp_proof.py | 612 | CODE | |
| LOW | …ver/hyprland-plugin/proofs/production_realapp_proof.py | 693 | CODE | |
| LOW | …land-plugin/proofs/production_target_lifetime_proof.py | 455 | CODE | |
| LOW | …iver/hyprland-plugin/proofs/production_policy_proof.py | 289 | CODE | |
| 586 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tools/cli-cast/record.py | 239 | # Strip the parent harness out of the child's environment. When a | COMMENT |
| LOW | tests/agent_loop_testing/agent_test.py | 123 | # All other commands just return success | COMMENT |
| MEDIUM | tests/e2e/cua-sdk/python/test_docs_blocks.py | 467 | # image this repo does not publish); the harness sets only the pool names. | COMMENT |
| MEDIUM | tests/e2e/cua-sdk/docs/extract.py | 10 | ```python test="docs" prelude="fakefleet" # hidden harness setup | STRING |
| MEDIUM | libs/cua-driver/python/src/cua_driver/wrapper.py | 74 | # test harness. The Rust binary owns validation, consent, identity, and | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 5997 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 8003 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 8767 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 9430 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 9656 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 9798 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 9960 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 10181 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 10330 | # and just create a new instance with the required handle. | COMMENT |
| MEDIUM | …er/hyprland-plugin/tests/primary_hover_fixture_test.py | 75 | fixture.check_binary() # Test fixture provenance belongs to the harness. | CODE |
| MEDIUM | libs/cua-driver/rust/crates/cua-driver/Cargo.toml | 97 | # Shared integration-test harness (MCP/CLI transports, child reaping, paths, | COMMENT |
| MEDIUM | …-driver/rust/crates/platform-linux/src/atspi/native.rs | 5042 | /// Vision/pixel click that actually lands — the Wayland answer (and a robust | COMMENT |
| MEDIUM | …driver/rust/crates/platform-windows/src/tools/impl_.rs | 6159 | // the string. Documented gap-closer (PR #1699 harness exposed). | COMMENT |
| MEDIUM | …ust/crates/platform-windows/src/tools/page_bookmark.rs | 144 | /// is robust against re-renders that change the title mid-flight. | COMMENT |
| MEDIUM | …a-driver/rust/crates/platform-macos/src/tools/click.rs | 365 | // screenshot width / logical screen width. This is robust even when | COMMENT |
| MEDIUM | …r/rust/crates/cua-driver-e2e/tests/harness_wpf_test.rs | 1721 | // coords, so it's the more robust slider integration test. | COMMENT |
| MEDIUM | …rates/cua-driver-e2e/tests/desktop_scope_linux_test.rs | 17 | //! #[ignore] (needs an X11/Xwayland display + AT-SPI + the GTK3 harness). Run: | COMMENT |
| MEDIUM | …rates/cua-driver-e2e/tests/desktop_scope_linux_test.rs | 101 | /// carries that aid and has a frame, so we're robust to the exact field name. | COMMENT |
| MEDIUM | …a-driver-e2e/tests/standalone_browser_behavior_test.rs | 76 | r#"<main class="harness-grid">"#, | CODE |
| MEDIUM | libs/cua-driver/examples/jev-use/python/native_tasks.py | 706 | # The same three tasks run on every repository harness that has a task mode: | COMMENT |
| MEDIUM | libs/cua-driver/examples/jev-use/python/native_tasks.py | 707 | # AppKit (macOS AX), WPF and WinUI3 (Windows UIA), and GTK3 (Linux AT-SPI). Each harness | COMMENT |
| MEDIUM | libs/cua-driver/examples/jev-use/python/native_tasks.py | 801 | # a form harness: it has one task, reached only through the visual fallback. | COMMENT |
| MEDIUM | …examples/jev-use/python/tests/test_native_platforms.py | 61 | continue # the visual-only canvas is not a form harness (see test_native_canvas.py) | CODE |
| MEDIUM | libs/cua-driver/scripts/_install-common.sh | 114 | # user's `cua-driver-rs-foo` test harness or any script | COMMENT |
| MEDIUM | libs/cua-driver/scripts/_install-common.sh | 173 | # robust to a missing trailing newline. | COMMENT |
| MEDIUM | libs/cuabot/src/cuabotd.ts | 526 | // Xpra runs in seamless mode - each app window is a separate Xpra window on the host, | COMMENT |
| MEDIUM | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 639 | """Retrieves the current status of the emulator. This includes comprehensive | STRING |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/build.py | 344 | # Nothing to bake in — just use the base | STRING |
| LOW | libs/python/agent/cua_agent/agent.py | 93 | # Handle enums — just use their value | COMMENT |
| LOW | libs/python/agent/cua_agent/integrations/hud/agent.py | 272 | # If we don't have the tool call inputs, we should just use the previous output | STRING |
| LOW | libs/python/agent/cua_agent/loops/gemini.py | 80 | # Handle enums early — just use their value | COMMENT |
| MEDIUM | …andbox_apps/apps/eclipse-ide/linux/extract_metadata.sh | 3 | # Extract metadata for Eclipse IDE - robust version | COMMENT |
| MEDIUM | …a_sandbox_apps/apps/netbeans/linux/extract_metadata.sh | 3 | # Extract NetBeans metadata with robust discovery | COMMENT |
| MEDIUM | …sandbox_apps/apps/metasploit/linux/extract_metadata.sh | 3 | # Extract metadata for Metasploit Framework - final robust version | COMMENT |
| MEDIUM | libs/images/common/desktop/entrypoint.sh | 26 | # SSH when the harness asks for it. | COMMENT |
| MEDIUM | libs/kasm/src/ubuntu/install/firefox/install_firefox.sh | 109 | # Update firefox to utilize the system certificate store instead of the one that ships with firefox | COMMENT |
| MEDIUM | libs/cua/bench/streaming/shims/browser.sh | 7 | # The page decodes with WebCodecs, so frame lines carry tc_ms. The harness | COMMENT |
| MEDIUM | libs/cua/bench/streaming/shims/python.sh | 7 | # The harness sets CUA_ENV_URL, CUA_ENV_TOKEN, CUA_BENCH_JSONL, | COMMENT |
| MEDIUM | libs/cua/bench/streaming/shims/node.sh | 6 | # bench mode (SCENARIO.md "Benchmark JSONL"). The harness sets CUA_ENV_URL, | COMMENT |
| MEDIUM | libs/cua/bench/streaming/shims/rust-sdk.sh | 6 | # decoded media API, as opposed to the harness's own native `rust` lane). | COMMENT |
| MEDIUM | libs/cua/bench/streaming/shims/rust-sdk.sh | 8 | # The harness sets CUA_ENV_URL, CUA_ENV_TOKEN, CUA_BENCH_JSONL, | COMMENT |
| MEDIUM | libs/cua/bench/streaming/scripts/build-linux.sh | 5 | # Build the benchmark harness for Linux (host arch) inside Docker, for the | COMMENT |
| MEDIUM | libs/cua/crates/cua-teleport/src/biometric.rs | 22 | //! fallback, the robust choice for an unsigned CLI. | COMMENT |
| MEDIUM | libs/cua/crates/cua-teleport/src/biometric.rs | 231 | // value 2): the robust choice for an unsigned CLI that may run where no | COMMENT |
| MEDIUM | …s/cua/crates/cua-spaces-app-core/src/driver_preview.rs | 21 | //! One loop is [`DRIVER_LOOP_MS`] and seamless. With Reduce Motion the | COMMENT |
| MEDIUM | …a/crates/cua-spaces-app-core/src/onboarding_preview.rs | 680 | // The loop is seamless. | COMMENT |
| MEDIUM | …/crates/cua-spaces-app-core/src/drive_mount_preview.rs | 17 | //! [`DRIVE_LOOP_MS`] is seamless. With Reduce Motion the shells draw | COMMENT |
| MEDIUM | libs/cua-spacesd/tests/spaces-e2e/Cargo.toml | 7 | # - the library is the in-process driver harness (temp guest HOME/PATH via | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 2109 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 3391 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 3498 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 3674 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 3801 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 3934 | # and just create a new instance with the required handle. | COMMENT |
| LOW | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 4305 | # and just create a new instance with the required handle. | COMMENT |
| 81 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | libs/cuabot/src/mcp/overlay-cursor.py | 566 | # Check if already running - send move command instead | COMMENT |
| LOW | libs/cuabot/src/scripts/agent-device-wrapper.sh | 9 | # Check if nested virtualization is enabled | COMMENT |
| LOW | libs/cuabot/src/scripts/agent-device-wrapper.sh | 88 | # Check if nested virtualization is enabled | COMMENT |
| LOW | libs/cuabot/src/scripts/agent-device-wrapper.sh | 91 | # Check if Android system images exist | COMMENT |
| LOW | libs/python/cua-sandbox/cua_sandbox/image.py | 97 | # Check if we already have the extracted result | COMMENT |
| LOW | …on/cua-sandbox/cua_sandbox/runtime/android_emulator.py | 53 | # Check if java works without JAVA_HOME | COMMENT |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/pwa2apk.py | 49 | # Check if pwa2apk is installed globally or locally | COMMENT |
| LOW | libs/python/som/som/detection.py | 59 | # Check if the model file already exists | COMMENT |
| LOW | libs/python/som/som/detection.py | 69 | # Check if the model exists in cache | COMMENT |
| LOW | libs/python/som/som/ocr.py | 23 | # Check if we're in the main thread | COMMENT |
| LOW | libs/python/som/som/detect.py | 254 | # Check if this center point is inside the non-OCR element | COMMENT |
| LOW | libs/python/agent/example.py | 131 | # # Print output | COMMENT |
| LOW | libs/python/agent/benchmarks/ss-v2.py | 75 | # Check if prediction is correct | COMMENT |
| LOW | libs/python/agent/benchmarks/ss-pro.py | 69 | # Check if prediction is correct | COMMENT |
| LOW | libs/python/agent/benchmarks/interactive.py | 163 | # Display results summary | COMMENT |
| LOW | libs/python/agent/cua_agent/responses.py | 763 | # Check if this is the "[Execution completed. See screenshot below]" pattern | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/__init__.py | 28 | # Check if telemetry is enabled | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/agent.py | 588 | # Check if it's a BaseTool instance | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/agent.py | 591 | # Check if it's a regular callable | COMMENT |
| LOW | libs/python/agent/cua_agent/agent.py | 561 | # Check if it's a computer object (has interface attribute) | COMMENT |
| LOW | libs/python/agent/cua_agent/agent.py | 732 | # # Print messages | COMMENT |
| LOW | libs/python/agent/cua_agent/agent.py | 782 | # Check if this was a terminate action | COMMENT |
| LOW | libs/python/agent/cua_agent/__main__.py | 14 | # Check if 'cli' is specified as the module | COMMENT |
| LOW | libs/python/agent/cua_agent/ui/gradio/ui_components.py | 54 | # Check if API keys are available | COMMENT |
| LOW | libs/python/agent/cua_agent/playground/server.py | 267 | # Check if there's already a running event loop | COMMENT |
| LOW | …s/python/agent/cua_agent/callbacks/trajectory_saver.py | 480 | # Check if action has x/y coordinates and there's a screenshot in the result | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/human_tool/ui.py | 45 | # Check if it's a base64 image or URL | COMMENT |
| LOW | libs/python/agent/cua_agent/human_tool/ui.py | 416 | # Check if there are any pending calls | COMMENT |
| LOW | libs/python/agent/cua_agent/adapters/mlxvlm_adapter.py | 291 | # Check if output contains box tokens that need processing | COMMENT |
| LOW | …bs/python/agent/cua_agent/adapters/azure_ml_adapter.py | 92 | # Check if message has tool_calls that need double-encoding | COMMENT |
| LOW | libs/python/agent/cua_agent/loops/anthropic.py | 776 | # Check if this is a custom function tool or computer tool | COMMENT |
| LOW | libs/python/agent/cua_agent/loops/fara/config.py | 195 | # Check if the last message is a terminate function_call_output | COMMENT |
| LOW | libs/python/agent/cua_agent/loops/fara/config.py | 212 | # Check if it's a terminate action output (contains "terminated": True) | COMMENT |
| LOW | libs/python/agent/cua_agent/loops/fara/config.py | 280 | # Check if computer_handler has get_current_url method | COMMENT |
| LOW | …ps/cua_sandbox_apps/apps/vim/linux/extract_metadata.sh | 44 | # Check if this is a vim icon | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 75 | # Check if unity-hub is in dpkg database | COMMENT |
| LOW | …dbox_apps/apps/intellij-idea/linux/extract_metadata.sh | 10 | # Check if installed via package manager | COMMENT |
| LOW | …-apps/cua_sandbox_apps/apps/postgresql/linux/launch.sh | 11 | # Check if the server is running | COMMENT |
| LOW | …sandbox_apps/apps/postgresql/linux/extract_metadata.sh | 70 | # Check if already in list | COMMENT |
| LOW | …dbox-apps/cua_sandbox_apps/apps/gitlab/linux/launch.sh | 6 | # Check if GitLab is installed | COMMENT |
| LOW | …box-apps/cua_sandbox_apps/apps/gitlab/linux/install.sh | 8 | # Check if already installed | COMMENT |
| LOW | …box-apps/cua_sandbox_apps/apps/mariadb/linux/launch.sh | 10 | # Check if MariaDB is already running | COMMENT |
| LOW | …ox-apps/cua_sandbox_apps/apps/openshot/linux/launch.sh | 17 | # Check if process is still running | COMMENT |
| LOW | …box-apps/cua_sandbox_apps/apps/raneto/linux/install.sh | 6 | # Check if Node.js 20+ is already installed | COMMENT |
| LOW | …ua_sandbox_apps/apps/jenkins/linux/extract_metadata.sh | 172 | # Check if there's an icon in the Jenkins WAR as last resort | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 55 | # Check if file exists - try without sudo first, then with sudo | COMMENT |
| LOW | …box_apps/apps/github-actions/linux/extract_metadata.sh | 98 | # Check if binary name contains github-actions or similar | COMMENT |
| LOW | libs/python/bench-ui/examples/folder_example.py | 33 | # Check if button has been clicked | COMMENT |
| LOW | libs/lumier/src/bin/entry.sh | 28 | # Set VM_NAME to env or fallback to container name (from --name) | COMMENT |
| LOW | libs/lumier/src/bin/entry.sh | 34 | # Set HOST_STORAGE_PATH to a lume ephemeral storage if not set | COMMENT |
| LOW | libs/lumier/src/bin/entry.sh | 57 | # Check if we're running as PID 1 (important for Docker signal handling) | COMMENT |
| LOW | libs/lumier/src/bin/entry.sh | 81 | # Check if we're in the middle of an image pull | COMMENT |
| LOW | libs/lumier/src/hooks/on-logon.sh | 23 | # Check if the user-provided script exists | COMMENT |
| LOW | libs/lumier/src/lib/utils.sh | 54 | # Check if all required arguments are provided | COMMENT |
| LOW | libs/lumier/src/lib/vm.sh | 13 | # Check if VM exists and its status using JSON format - quietly | COMMENT |
| LOW | libs/lumier/src/lib/vm.sh | 16 | # Check if VM not found error | COMMENT |
| LOW | libs/lumier/src/lib/vm.sh | 78 | # Check if VM status is 'running' and we have IP and VNC URL | COMMENT |
| LOW | libs/lumier/src/lib/vm.sh | 113 | # Check if script exists | COMMENT |
| LOW | libs/lume/scripts/install.sh | 15 | # Check if running as root or with sudo | COMMENT |
| LOW | libs/lume/scripts/install.sh | 160 | # Check if we're running with appropriate permissions | COMMENT |
| 83 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/agent_loop_testing/agent_test_uitars.py | 123 | # Create the real CUA ComputerAgent | COMMENT |
| MEDIUM | tests/agent_loop_testing/agent_test.py | 139 | # Create the real Cua ComputerAgent | COMMENT |
| MEDIUM | docs/scripts/modal_app.py | 24 | # Define the Modal app | COMMENT |
| MEDIUM | docs/scripts/modal_app.py | 40 | # Define the container image with all dependencies | COMMENT |
| MEDIUM | docs/scripts/modal_app.py | 1137 | # Create main table | STRING |
| MEDIUM | docs/scripts/docs-mcp-server/main.py | 476 | # Create the ASGI app | COMMENT |
| MEDIUM⚡ | libs/cua-driver/python/src/cua_driver/_native.py | 290 | # This function is used for rust calls that return Result<> and therefore can set the CALL_ERROR status code. | COMMENT |
| MEDIUM⚡ | …s/cua-driver/python/src/cua_driver/_native_contract.py | 288 | # This function is used for rust calls that return Result<> and therefore can set the CALL_ERROR status code. | COMMENT |
| MEDIUM | libs/cuabot/src/mcp/overlay-cursor.py | 225 | # Create an empty region (no input area) | COMMENT |
| MEDIUM | libs/cuabot/src/mcp/overlay-cursor.py | 318 | # Create a copy to modify | COMMENT |
| MEDIUM | libs/cuabot/src/mcp/overlay-cursor.py | 327 | # Create a new pixel array | COMMENT |
| MEDIUM | libs/python/core/cua_core/telemetry/__init__.py | 1 | """This module provides the core telemetry functionality for Cua libraries. | STRING |
| MEDIUM | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1263 | # This class is part of an EXPERIMENTAL API. | COMMENT |
| MEDIUM⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 333 | # Create a small data-only ISO with Autounattend.xml + setup script. | COMMENT |
| MEDIUM | libs/python/agent/benchmarks/utils.py | 393 | # Create a copy of the image | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/ui/gradio/app.py | 203 | # Create the computer | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/ui/gradio/ui_components.py | 197 | # Create the Gradio interface | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/tools/browser_tool.py | 263 | # Create a task and wait for it | COMMENT |
| MEDIUM | …s/python/agent/cua_agent/callbacks/trajectory_saver.py | 36 | # Create a copy of the dictionary | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/callbacks/logging.py | 23 | # Create a copy of the dictionary | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/human_tool/ui.py | 97 | # Create a formatted message for the tool call | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/human_tool/__main__.py | 15 | # Create the Gradio demo | COMMENT |
| MEDIUM | libs/python/agent/cua_agent/loops/glm45v.py | 823 | # Create a simple click instruction prompt | COMMENT |
| MEDIUM | …dbox-apps/cua_sandbox_apps/apps/sqlite/linux/launch.sh | 3 | # Create a demo database file | COMMENT |
| MEDIUM | …dbox-apps/cua_sandbox_apps/apps/sqlite/linux/launch.sh | 37 | # Create a shell script that will be executed in the terminal | COMMENT |
| MEDIUM | …cua_sandbox_apps/apps/sqlite/linux/extract_metadata.sh | 76 | # Create the metadata JSON object | COMMENT |
| MEDIUM | …ox-apps/cua_sandbox_apps/apps/jenkins/linux/install.sh | 61 | # Create a simple shell script to run jenkins directly | COMMENT |
| MEDIUM | …-apps/cua_sandbox_apps/apps/kubernetes/linux/launch.sh | 19 | # Create a sample Kubernetes manifest directory for demonstration | COMMENT |
| MEDIUM | …dbox-apps/cua_sandbox_apps/apps/neovim/linux/launch.sh | 6 | # Create a sample file to edit | COMMENT |
| MEDIUM | …dbox-apps/cua_sandbox_apps/apps/godot/linux/install.sh | 27 | # Create a symlink in /usr/local/bin for easy access | COMMENT |
| MEDIUM | …s/cua_sandbox_apps/apps/github-actions/linux/launch.sh | 8 | # Create a temporary directory for the dashboard | COMMENT |
| MEDIUM | …s/cua_sandbox_apps/apps/github-actions/linux/launch.sh | 12 | # Create an HTML dashboard | COMMENT |
| MEDIUM | libs/kasm/src/ubuntu/install/firefox/install_firefox.sh | 156 | # Creating a default profile | COMMENT |
| MEDIUM | libs/lumier/src/hooks/on-logon.sh | 14 | # Define the path to the user's optional on-logon script within the shared folder | COMMENT |
| MEDIUM | libs/cua-spacesd/crates/cua-spacesd-teleport/Cargo.toml | 23 | # Creating the destination's own Safe Storage secret when re-encrypting | COMMENT |
| MEDIUM | libs/lume/scripts/install.sh | 551 | # Create the plist file - runs lume via the wrapper script | COMMENT |
| MEDIUM | libs/lume/scripts/install-local.sh | 279 | # Create the plist file | COMMENT |
| MEDIUM | libs/lume/scripts/setup-cua.sh | 163 | # Create an askpass helper for non-interactive sudo | COMMENT |
| MEDIUM | libs/lume/scripts/setup-cua.sh | 361 | # Create a wrapper script that reads VNC config from ~/.vnc.env | COMMENT |
| MEDIUM⚡ | libs/lume/scripts/install-openclaw-vm.sh | 104 | # Create an askpass helper so all sudo calls during install work without a TTY | COMMENT |
| MEDIUM⚡ | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 288 | # This function is used for rust calls that return Result<> and therefore can set the CALL_ERROR status code. | COMMENT |
| MEDIUM⚡ | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 290 | # This function is used for rust calls that return Result<> and therefore can set the CALL_ERROR status code. | COMMENT |
| MEDIUM | …h/tasks/winarena_adapter/infra/vm/setup/server/main.py | 1787 | # Create a snapshot of the system | STRING |
| MEDIUM | …ench/tasks/winarena_adapter/evaluators/metrics/docs.py | 31 | # Define the XML namespace used in the file | COMMENT |
| MEDIUM | …ench/tasks/winarena_adapter/evaluators/metrics/docs.py | 759 | # Define the namespaces | COMMENT |
| MEDIUM | …ench/tasks/winarena_adapter/evaluators/metrics/gimp.py | 319 | # Create a mask where the triangle pixels are True | COMMENT |
| MEDIUM | …ch/tasks/winarena_adapter/evaluators/metrics/vscode.py | 216 | # Create a unique module name, it can be arbitrary but must be unique in the current runtime environment | COMMENT |
| MEDIUM | …bench/tasks/winarena_adapter/evaluators/metrics/vlc.py | 148 | # Define a lambda function to compute cosine distance | COMMENT |
| MEDIUM | …h/tasks/winarena_adapter/evaluators/getters/impress.py | 52 | # Define the namespace used in the relationships file | COMMENT |
| MEDIUM | …h/tasks/winarena_adapter/evaluators/getters/impress.py | 102 | # Define the namespace used in the relationships file | COMMENT |
| MEDIUM | …h/tasks/winarena_adapter/evaluators/getters/impress.py | 118 | # Create a temporary directory to extract the audio file | COMMENT |
| MEDIUM | …ch/tasks/winarena_adapter/evaluators/getters/chrome.py | 1327 | # Define the keys of interest | COMMENT |
| MEDIUM | …/winarena_adapter/evaluators/getters/microsoftpaint.py | 21 | # Define the red color range for circumference | COMMENT |
| MEDIUM | …/winarena_adapter/evaluators/getters/microsoftpaint.py | 25 | # Define the white color range for interior | COMMENT |
| MEDIUM⚡ | …/winarena_adapter/evaluators/getters/microsoftpaint.py | 47 | # Define the bounding box of the detected circle | COMMENT |
| MEDIUM⚡ | …/winarena_adapter/evaluators/getters/microsoftpaint.py | 61 | # Define a threshold for considering it a valid white interior | COMMENT |
| MEDIUM | …ch/datasets/cua-bench-workflows/openshot-tasks/main.py | 102 | # Create the projects directory | COMMENT |
| MEDIUM | libs/cua-bench/cua_bench/processors/base.py | 107 | # Create a temp file for the screenshot | COMMENT |
| MEDIUM | libs/cua-bench/cua_bench/apps/godot.py | 68 | # Create a simpler symlink name | COMMENT |
| MEDIUM | libs/cua-bench/scripts/dev/render_slack_grid.py | 44 | # Create a list to hold images | COMMENT |
| 9 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …mples/jev-use/typescript/visual_decision_state.test.ts | 194 | request.questions.driver_action.criteria.reobserve.includes('incomplete'), | CODE |
| CRITICAL | libs/cua/crates/cua-fleet/tests/fleet.rs | 317 | let template = handle.pool.spec.sandbox_template_ref.name.clone(); | CODE |
| CRITICAL | libs/cua/crates/cua-fleet/src/spec.rs | 1128 | handle.pool.spec.sandbox_template_ref.name.clone(), | CODE |
| CRITICAL | libs/cua/crates/cua-fleet/src/spec.rs | 1233 | let tname = handle.pool.spec.sandbox_template_ref.name.clone(); | CODE |
| CRITICAL | libs/cua/crates/cua-sandbox-core/src/fleet_local.rs | 244 | let tname = handle.pool.spec.sandbox_template_ref.name.clone(); | CODE |
| CRITICAL | libs/cua/crates/cua-spacesd-html5/web/e2e/viewer.e2e.ts | 390 | await (window as any).__cuaViewer.share(h, `${(window as any).__cuaViewer.viewer.api.endpoint.params.get("files" | CODE |
| CRITICAL | libs/cua/crates/cua-cli/tests/sandbox_do.rs | 361 | let kb = env.mock.state.observed.keyboard.lock().unwrap().clone(); | CODE |
| CRITICAL | libs/cua/crates/cua-cli/tests/sandbox_do.rs | 397 | let w = env.mock.state.observed.windows.lock().unwrap().clone(); | CODE |
| CRITICAL | libs/cua/crates/cua-cli/tests/sandbox_do.rs | 956 | let kb = env.mock.state.observed.keyboard.lock().unwrap().clone(); | CODE |
| CRITICAL | libs/cua-spacesd/crates/cua-spacesd-desktop/src/lib.rs | 173 | entry.target.id.epoch = TargetEpoch(entry.target.id.epoch.0.saturating_add(1)); | CODE |
| CRITICAL | …a-spacesd/crates/cua-spacesd-doctor/src/checks/auth.rs | 371 | let user = if ctx.manifest.manifest.display.user.is_empty() { | CODE |
| CRITICAL | …a-spacesd/crates/cua-spacesd-doctor/src/checks/auth.rs | 374 | ctx.manifest.manifest.display.user.clone() | CODE |
| CRITICAL | …a-spacesd/crates/cua-spacesd-doctor/src/checks/auth.rs | 478 | let user = ctx.manifest.manifest.display.user.clone(); | CODE |
| CRITICAL | …pacesd/crates/cua-spacesd-doctor/src/checks/desktop.rs | 113 | let root = ctx.manifest.manifest.fixtures.root.clone(); | CODE |
| CRITICAL | …-spacesd/crates/cua-spacesd-doctor/src/checks/audio.rs | 144 | let root = ctx.manifest.manifest.fixtures.root.clone(); | CODE |
| CRITICAL | …spacesd/crates/cua-spacesd-doctor/src/checks/driver.rs | 267 | let pin = ctx.manifest.manifest.spacesd.cua_driver_version.clone(); | CODE |
| CRITICAL | …cesd/crates/cua-spacesd-doctor/src/checks/resources.rs | 91 | let home = if ctx.manifest.manifest.display.user.is_empty() { | CODE |
| CRITICAL | …et/sdk-bindings/kotlin/ai/cua/cyclops/sdk/fleet_sdk.kt | 954 | ai.cua.cyclops.sdk.schema.uniffiEnsureInitialized() | CODE |
| CRITICAL | …et/sdk-bindings/kotlin/ai/cua/cyclops/sdk/fleet_sdk.kt | 1976 | private val cleaner = com.sun.jna.internal.Cleaner.getCleaner() | CODE |
| CRITICAL | …kotlin/ai/cua/cyclops/sdk/schema/cyclops_sdk_schema.kt | 1247 | private val cleaner = com.sun.jna.internal.Cleaner.getCleaner() | CODE |
| CRITICAL | …/Sources/CuaSpacesMacKit/WebHost/WebUIVideoBench.swift | 230 | let content = surface.view.input.geometry.contentRect.offsetBy(dx: video.minX, dy: video.minY) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | docs/scripts/modal_app.py | 1614 | # Initialize embedding model - load eagerly to avoid cold start on first search | COMMENT |
| MEDIUM | docs/scripts/modal_app.py | 1201 | # Initialize embedding model and schema | STRING |
| MEDIUM | docs/scripts/README.md | 35 | # capture time, embedding model, file hashes | COMMENT |
| MEDIUM | docs/scripts/docs-mcp-server/main.py | 164 | # Initialize embedding model - load eagerly to avoid cold start on first search | COMMENT |
| MEDIUM | blog/build-your-own-operator-on-macos-2.md | 166 | - **Anthropic Loop**: Implements a [multi-agent loop pattern](https://platform.claude.com/docs/en/agents-and-tools/tool- | CODE |
| MEDIUM | blog/build-your-own-operator-on-macos-2.md | 194 | - **AgentLoop.ANTHROPIC**: Ideal for users with Anthropic API access who need strong reasoning capabilities with compute | CODE |
| MEDIUM | blog/clawcon-multiplayer.md | 7 | We're early OpenClaw contributors and sponsors (we documented [how to deploy OpenClaw to macOS sandboxes with Lume](http | CODE |
| MEDIUM⚡ | libs/cua-driver/python/src/cua_driver/_native.py | 477 | # Get the scaffolding contract version by calling the into the dylib | COMMENT |
| MEDIUM⚡ | …s/cua-driver/python/src/cua_driver/_native_contract.py | 475 | # Get the scaffolding contract version by calling the into the dylib | COMMENT |
| MEDIUM | libs/cua-driver/hyprland-plugin/tests/proof_fixtures.py | 347 | # Real-app runner scaffolding (production_realapp_proof.run). | COMMENT |
| MEDIUM | …hyprland-plugin/tests/production_realapp_proof_test.py | 1230 | # Exercise orchestration without a compositor, Driver process, or GUI. | COMMENT |
| MEDIUM | …river/rust/crates/cua-driver-core/src/text_sanitize.rs | 19 | //! closing tags before the text leaves the tool layer. Three guardrails | COMMENT |
| MEDIUM | …river/rust/crates/cua-driver-core/src/text_sanitize.rs | 59 | /// See module docs for the false-positive guardrails. The function is | COMMENT |
| MEDIUM | libs/cua-s1/evals/README.md | 1 | # Offline evaluation scaffold | COMMENT |
| MEDIUM | libs/cua-s1/python/pyproject.toml | 71 | # by `cua_bench_s1.agentic`, so everything short of an actual rollout works | COMMENT |
| MEDIUM⚡ | libs/cua-s1/training/train_4b_rl.py | 153 | # `cua_bench_s1.agentic.CuaBenchBasicEnv` into the closed (element, action) | COMMENT |
| MEDIUM | …andbox-apps/cua_sandbox_apps/discovery/batch_enrich.py | 281 | # Also skip already fully enriched (from prior agent-based run or prior batch) | COMMENT |
| MEDIUM | libs/cua/crates/cua-byoc/src/bootstrap.rs | 10 | //! Three guardrails make a forgotten VM end on its own: | COMMENT |
| MEDIUM | libs/cua-bench-s1/README.md | 366 | ## Live agentic rollouts (RL) | COMMENT |
| MEDIUM | …python/src/cua_bench_s1/agentic/cua_bench_basic_env.py | 100 | #: Hard per-episode step cap for agentic rollouts on this family. | COMMENT |
| MEDIUM⚡ | libs/fleet/sdk-bindings/python/fleet_sdk/_schema.py | 475 | # Get the scaffolding contract version by calling the into the dylib | COMMENT |
| MEDIUM⚡ | libs/fleet/sdk-bindings/python/fleet_sdk/_sdk.py | 477 | # Get the scaffolding contract version by calling the into the dylib | COMMENT |
| MEDIUM | libs/fleet/scripts/generate-sdk-bindings.sh | 734 | # Add the callback-handle map and vtable that its Rust scaffolding expects. | COMMENT |
| MEDIUM | libs/cua-bench/tasks/winarena_adapter/infra/README.md | 99 | │ ├── run_azure_batch.py # Azure Batch orchestration | CODE |
| MEDIUM | …asks/winarena_adapter/infra/docs/WAA_IMPLEMENTATION.md | 99 | │ ├── run_azure_batch.py # Azure Batch orchestration | CODE |
| MEDIUM | …-bench/datasets/cua-bench-basic/click-button/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …ch/datasets/cua-bench-basic/right-click-menu/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …ua-bench/datasets/cua-bench-basic/click-icon/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …nch/datasets/cua-bench-basic/select-dropdown/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …cua-bench/datasets/cua-bench-basic/fill-form/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …-bench/datasets/cua-bench-basic/typing-input/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …a-bench/datasets/cua-bench-basic/date-picker/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …a-bench/datasets/cua-bench-basic/drag-slider/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …ch/datasets/cua-bench-basic/spreadsheet-cell/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …bench/datasets/cua-bench-basic/toggle-switch/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …-bench/datasets/cua-bench-basic/color-picker/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …-bench/datasets/cua-bench-basic/video-player/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | …cua-bench/datasets/cua-bench-basic/drag-drop/CLAUDE.md | 1 | # cua-bench environment scaffolding guide | COMMENT |
| MEDIUM | scripts/ci/linux/run-rust-e2e-wayland.sh | 13 | # orchestration label separate so focus, z-order, and sentinel observers use | COMMENT |
| MEDIUM | scripts/docs-generators/headers/cua-sdk/rust/index.md | 18 | - Not API: items hidden from these pages (`#[doc(hidden)]`), the UniFFI scaffolding (`uniffi_*`, `ffi_*`), and cargo fea | CODE |
| MEDIUM | .github/workflows/cd-rust-cua-driver.yml | 1284 | # Release inputs stay pinned to the tag checkout above; orchestration | COMMENT |
| MEDIUM | .github/workflows/cd-rust-cua-driver.yml | 1589 | # The orchestration helpers and the withdrawn list come from the exact | COMMENT |
| MEDIUM | .github/release-backfill/rendered.json | 258 | "finalBody": "> **cua-driver-rs**\n>\n> `cua-driver-rs` is the Rust implementation of\n> [`cua-driver`](https://gi | CODE |
| MEDIUM | .github/release-backfill/catalog.json | 5131 | "body": "> **cua-driver-rs**\n>\n> `cua-driver-rs` is the Rust implementation of\n> [`cua-driver`](https://github. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | tools/cli-cast/record.py | 162 | def _set_winsize(fd: int, rows: int, cols: int) -> None: | CODE |
| LOW | libs/cua-driver/python/src/cua_driver/__init__.py | 249 | __all__ = [ | CODE |
| LOW | libs/cua-driver/python/src/cua_driver/_native.py | 10696 | __all__ = [ | CODE |
| LOW | …s/cua-driver/python/src/cua_driver/_native_contract.py | 8491 | __all__ = [ | CODE |
| LOW | libs/cua-driver/examples/jev-use/python/run.py | 36 | __all__ = ["fixture_state", "reset_fixture"] | CODE |
| LOW | libs/cua-driver/examples/jev-use/python/core.py | 36 | __all__ = [ | CODE |
| LOW | libs/cua-s1/evals/__init__.py | 5 | __all__ = ["evaluate_predictions"] | CODE |
| LOW | libs/cua-s1/python/src/cua_s1/__init__.py | 8 | __all__ = ["__version__"] | CODE |
| LOW | libs/python/core/cua_core/telemetry/__init__.py | 24 | __all__ = [ | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/pools.py | 26 | __all__ = [ | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/containers.py | 223 | __all__ = ["Container", "RegistrySecret", "image_build", "has_build", "sidecars_of"] | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/_refs.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/__init__.py | 85 | __all__ = [ | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 137 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/_placement.py | 31 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/_autopool.py | 54 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/pool.py | 46 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/image.py | 32 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/env.py | 37 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/python/cua-sandbox/cua_sandbox/transport/agentless.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/cloud.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | …s/python/cua-sandbox/cua_sandbox/transport/__init__.py | 12 | __all__ = [ | CODE |
| LOW | …ython/cua-sandbox/cua_sandbox/transport/fleet_cloud.py | 56 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/vncssh.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/qmp.py | 29 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/ssh.py | 20 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/vnc.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | …on/cua-sandbox/cua_sandbox/runtime/android_emulator.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | …thon/cua-sandbox/cua_sandbox/runtime/qemu_installer.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/__init__.py | 14 | __all__ = [ | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/native.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/docker.py | 23 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/hyperv.py | 33 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/tart.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/qemu.py | 46 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/runtime/lume.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 41 | logger = logging.getLogger(__name__) | CODE |
| LOW | …bs/python/cua-sandbox/cua_sandbox/registry/__init__.py | 13 | __all__ = [ | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/build.py | 35 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/overlay.py | 19 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/pwa2apk.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/__init__.py | 6 | __all__ = ["LayerExecutor", "create_overlay", "IMAGES_DIR"] | CODE |
| LOW | …on/cua-sandbox/cua_sandbox/builder/windows_unattend.py | 16 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/cua-sandbox/cua_sandbox/builder/executor.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | …thon/cua-sandbox/cua_sandbox/interfaces/_driver_mcp.py | 9 | logger = logging.getLogger(__name__) | CODE |
| LOW | …/python/cua-sandbox/cua_sandbox/interfaces/__init__.py | 14 | __all__ = [ | CODE |
| LOW | …bs/python/cua-sandbox/cua_sandbox/interfaces/driver.py | 38 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/som/som/detection.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/som/som/__init__.py | 15 | __all__ = [ | CODE |
| LOW | libs/python/som/som/visualization.py | 10 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/som/som/ocr.py | 12 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/som/som/detect.py | 34 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/som/som/util/utils.py | 13 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/agent/benchmarks/models/__init__.py | 3 | __all__ = ["ModelProtocol"] | CODE |
| LOW⚡ | libs/python/agent/cua_agent/__init__.py | 14 | __all__ = ["register_agent", "ComputerAgent", "Messages", "AgentResponse"] | CODE |
| LOW⚡ | libs/python/agent/cua_agent/__init__.py | 18 | logger = logging.getLogger(__name__) | CODE |
| LOW | libs/python/agent/cua_agent/ui/__init__.py | 7 | __all__ = ["launch_ui", "create_gradio_ui"] | CODE |
| LOW | libs/python/agent/cua_agent/ui/gradio/__init__.py | 8 | __all__ = ["launch_ui", "create_gradio_ui"] | CODE |
| LOW | libs/python/agent/cua_agent/tools/__init__.py | 16 | __all__ = [ | CODE |
| LOW | libs/python/agent/cua_agent/tools/browser_tool.py | 25 | logger = logging.getLogger(__name__) | CODE |
| 59 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | libs/cua-s1/python/src/cua_s1/server.py | 109 | CODE | |
| LOW | libs/cua-s1/training/train.py | 178 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox_state.py | 33 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 276 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 451 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 3144 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 3291 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 1322 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 1653 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 1735 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/sandbox.py | 2534 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/_placement.py | 180 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/_autopool.py | 525 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/env.py | 224 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/cloud.py | 53 | CODE | |
| LOW | …ython/cua-sandbox/cua_sandbox/transport/fleet_cloud.py | 640 | CODE | |
| LOW | libs/python/cua-sandbox/cua_sandbox/transport/vncssh.py | 23 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1281 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1311 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1341 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1371 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1401 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1431 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1461 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1491 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1521 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1551 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1581 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1611 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1641 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1671 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1701 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1731 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1761 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1791 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1821 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1851 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1881 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1911 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1941 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 1971 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2001 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2031 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2061 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2091 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2121 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2151 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2181 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2211 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2241 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2271 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2301 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2331 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2361 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2391 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2421 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2451 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2481 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2511 | CODE | |
| LOW | …ansport/_grpc_emulator/emulator_controller_pb2_grpc.py | 2541 | CODE | |
| 61 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | blog/app-use.md | 128 | ### Step 1: Start the cua-computer-server | COMMENT |
| LOW | blog/app-use.md | 140 | ### Step 2: Connect iPhone Mirroring | COMMENT |
| LOW | blog/app-use.md | 144 | ### Step 3: Create an iPhone Automation Session | COMMENT |
| LOW | blog/introducing-cua-cloud-containers.md | 33 | ### Step 1: Get Your API Key | COMMENT |
| LOW | blog/introducing-cua-cloud-containers.md | 43 | ### Step 2: Launch Your First Sandbox | COMMENT |
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 202 | // Step 1: click with from_zoom=true and NO prior zoom context — expect error. | COMMENT |
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 219 | // Step 2: read the window, then zoom on it to store context. | COMMENT |
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 244 | // Step 3: click with from_zoom=true — should NOT return the "no zoom context" error. | COMMENT |
| LOW⚡ | …driver/rust/crates/platform-windows/src/tools/impl_.rs | 3752 | // Step 2: pin overlay to target window, then animate to screen coords. | COMMENT |
| LOW⚡ | …driver/rust/crates/platform-windows/src/tools/impl_.rs | 3761 | // Step 3: click pulse + actual click. | COMMENT |
| LOW⚡ | …river/rust/crates/platform-macos/src/input/skylight.rs | 642 | // Step 3: defocus previous front. | COMMENT |
| LOW⚡ | …river/rust/crates/platform-macos/src/input/skylight.rs | 647 | // Step 4: focus target. | COMMENT |
| LOW⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 330 | # Step 1: Get ISOs | COMMENT |
| LOW⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 338 | # Step 2: Create disk | COMMENT |
| LOW⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 341 | # Step 3: Run QEMU install | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 214 | # Step 1: Convert computer calls from xy to descriptions | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 218 | # Step 2: Convert responses items to completion messages | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 223 | # Step 3: Call thinking model with litellm.acompletion | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 255 | # Step 4: Convert completion messages back to responses items format | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 265 | # Step 5: Get all element descriptions and populate desc2xy mapping | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 283 | # Step 6: Convert computer calls from descriptions back to xy coordinates | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 286 | # Step 7: Return output and usage | COMMENT |
| LOW | libs/python/agent/cua_agent/loops/composed_grounded.py | 172 | # Step 0: Store last computer call image, if none then take a screenshot | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 393 | # Step 1: Convert computer calls from xy to descriptions | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 397 | # Step 2: Convert responses items to completion messages | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 407 | # Step 3: Call thinking model with litellm.acompletion | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 434 | # Step 4: Convert completion messages back to responses items format | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 443 | # Step 5: Use Moondream to get coordinates for each description | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 457 | # Step 6: Convert computer calls from descriptions back to xy coordinates | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 460 | # Step 7: Return output and usage | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 11 | # Step 1: Find the binary dynamically | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 41 | # Step 2: Find desktop entry file | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 59 | # Step 3: Extract metadata from desktop entry | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 73 | # Step 4: Try to get version from package manager if installed as package | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 82 | # Step 5: Search for icon files | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 110 | # Step 6: Fallback defaults | COMMENT |
| LOW | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 14 | # Step 1: Verify the package is installed and extract basic metadata | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 45 | # Step 2: Find binaries that actually exist on the filesystem | COMMENT |
| LOW | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 80 | # Step 3: Search for .desktop files | COMMENT |
| LOW | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 107 | # Step 4: Search for security-related icons as fallback | COMMENT |
| LOW | …ript/playground/src/components/modals/SourcePicker.tsx | 1 | // Step 1: Source selection cards (Local Docker, Cloud Sandbox, Custom URL) | COMMENT |
| LOW | libs/cua/crates/cua-cli/tests/mcp_skills_images.rs | 501 | md.contains("### Step 1: click OK") && md.contains("**Context:** a window"), | CODE |
| LOW⚡ | …cua-bench-s1/python/src/cua_bench_s1/datagen/gui360.py | 128 | # Step 1: raw per-episode JSONL iteration | COMMENT |
| LOW⚡ | …cua-bench-s1/python/src/cua_bench_s1/datagen/gui360.py | 145 | # Step 2: uia_controls_info -> flat element list | COMMENT |
| LOW⚡ | …cua-bench-s1/python/src/cua_bench_s1/datagen/gui360.py | 211 | # Step 5: element list + option set -> CuaTask | COMMENT |
| LOW⚡ | …h-s1/python/src/cua_bench_s1/datagen/androidcontrol.py | 93 | # Step 1: raw TFRecord episode iteration | COMMENT |
| LOW⚡ | …h-s1/python/src/cua_bench_s1/datagen/androidcontrol.py | 230 | # Step 4: gold action -> (target element, action) | COMMENT |
| LOW⚡ | …h-s1/python/src/cua_bench_s1/datagen/androidcontrol.py | 302 | # Step 6: family assignment (heuristic, documented) | COMMENT |
| LOW | libs/lume/src/Commands/Convert.swift | 71 | // Step 1: Pull the legacy source image into a temp VM | STRING |
| LOW | libs/lume/src/Commands/Convert.swift | 86 | // Step 2: Push the temp VM in OCI-compliant format | STRING |
| LOW | libs/lume/src/Commands/Convert.swift | 108 | // Step 3: Remove the temp VM | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 202 | // Step 1: click with from_zoom=true and NO prior zoom context — expect error. | COMMENT |
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 219 | // Step 2: read the window, then zoom on it to store context. | COMMENT |
| LOW | …er/rust/crates/cua-driver/tests/protocol_media_test.rs | 244 | // Step 3: click with from_zoom=true — should NOT return the "no zoom context" error. | COMMENT |
| LOW⚡ | …driver/rust/crates/platform-windows/src/tools/impl_.rs | 3752 | // Step 2: pin overlay to target window, then animate to screen coords. | COMMENT |
| LOW⚡ | …driver/rust/crates/platform-windows/src/tools/impl_.rs | 3761 | // Step 3: click pulse + actual click. | COMMENT |
| LOW⚡ | …river/rust/crates/platform-macos/src/input/skylight.rs | 642 | // Step 3: defocus previous front. | COMMENT |
| LOW⚡ | …river/rust/crates/platform-macos/src/input/skylight.rs | 647 | // Step 4: focus target. | COMMENT |
| LOW⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 330 | # Step 1: Get ISOs | COMMENT |
| LOW⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 338 | # Step 2: Create disk | COMMENT |
| LOW⚡ | …ython/cua-sandbox/cua_sandbox/registry/qemu_builder.py | 341 | # Step 3: Run QEMU install | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 214 | # Step 1: Convert computer calls from xy to descriptions | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 218 | # Step 2: Convert responses items to completion messages | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 223 | # Step 3: Call thinking model with litellm.acompletion | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 255 | # Step 4: Convert completion messages back to responses items format | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 265 | # Step 5: Get all element descriptions and populate desc2xy mapping | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 283 | # Step 6: Convert computer calls from descriptions back to xy coordinates | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/composed_grounded.py | 286 | # Step 7: Return output and usage | COMMENT |
| LOW | libs/python/agent/cua_agent/loops/composed_grounded.py | 172 | # Step 0: Store last computer call image, if none then take a screenshot | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 393 | # Step 1: Convert computer calls from xy to descriptions | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 397 | # Step 2: Convert responses items to completion messages | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 407 | # Step 3: Call thinking model with litellm.acompletion | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 434 | # Step 4: Convert completion messages back to responses items format | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 443 | # Step 5: Use Moondream to get coordinates for each description | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 457 | # Step 6: Convert computer calls from descriptions back to xy coordinates | COMMENT |
| LOW⚡ | libs/python/agent/cua_agent/loops/moondream3.py | 460 | # Step 7: Return output and usage | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 11 | # Step 1: Find the binary dynamically | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 41 | # Step 2: Find desktop entry file | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 59 | # Step 3: Extract metadata from desktop entry | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 73 | # Step 4: Try to get version from package manager if installed as package | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 82 | # Step 5: Search for icon files | COMMENT |
| LOW | …/cua_sandbox_apps/apps/unity/linux/extract_metadata.sh | 110 | # Step 6: Fallback defaults | COMMENT |
| LOW | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 14 | # Step 1: Verify the package is installed and extract basic metadata | COMMENT |
| LOW⚡ | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 45 | # Step 2: Find binaries that actually exist on the filesystem | COMMENT |
| LOW | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 80 | # Step 3: Search for .desktop files | COMMENT |
| LOW | …/cua_sandbox_apps/apps/wazuh/linux/extract_metadata.sh | 107 | # Step 4: Search for security-related icons as fallback | COMMENT |
| LOW | …ript/playground/src/components/modals/SourcePicker.tsx | 1 | // Step 1: Source selection cards (Local Docker, Cloud Sandbox, Custom URL) | COMMENT |
| LOW | libs/cua/crates/cua-cli/tests/mcp_skills_images.rs | 501 | md.contains("### Step 1: click OK") && md.contains("**Context:** a window"), | CODE |
| LOW⚡ | …cua-bench-s1/python/src/cua_bench_s1/datagen/gui360.py | 128 | # Step 1: raw per-episode JSONL iteration | COMMENT |
| LOW⚡ | …cua-bench-s1/python/src/cua_bench_s1/datagen/gui360.py | 145 | # Step 2: uia_controls_info -> flat element list | COMMENT |
| LOW⚡ | …cua-bench-s1/python/src/cua_bench_s1/datagen/gui360.py | 211 | # Step 5: element list + option set -> CuaTask | COMMENT |
| LOW⚡ | …h-s1/python/src/cua_bench_s1/datagen/androidcontrol.py | 93 | # Step 1: raw TFRecord episode iteration | COMMENT |
| LOW⚡ | …h-s1/python/src/cua_bench_s1/datagen/androidcontrol.py | 230 | # Step 4: gold action -> (target element, action) | COMMENT |
| LOW⚡ | …h-s1/python/src/cua_bench_s1/datagen/androidcontrol.py | 302 | # Step 6: family assignment (heuristic, documented) | COMMENT |
| LOW | libs/lume/src/Commands/Convert.swift | 71 | // Step 1: Pull the legacy source image into a temp VM | STRING |
| LOW | libs/lume/src/Commands/Convert.swift | 86 | // Step 2: Push the temp VM in OCI-compliant format | STRING |
| LOW | libs/lume/src/Commands/Convert.swift | 108 | // Step 3: Remove the temp VM | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/e2e/cua-sdk/docs/test_extract.py | 20 | "placeholder": {"owner": "docs", "requires_placeholder": True}, | CODE |
| LOW⚡ | tests/e2e/cua-sdk/docs/test_extract.py | 59 | ```python skip="placeholder" | STRING |
| LOW | tests/e2e/cua-sdk/docs/test_extract.py | 113 | ```python skip="placeholder" | STRING |
| LOW | docs/code-block-policy.json | 74 | "placeholder": { | CODE |
| LOW | blog/sandboxed-python-execution.md | 158 | page.fill('input[name="custtel"]', "555-0123") | CODE |
| LOW | …crates/cua-perception/tests/quality-corpus/generate.py | 324 | text_annotation("query", "SEARCH FILES", query, "placeholder"), text_annotation("run-text", "RUN", | CODE |
| LOW | …ates/cua-perception/tests/quality-corpus/manifest.json | 767 | "role": "placeholder" | CODE |
| LOW | …river/rust/crates/platform-linux/src/input/targeted.rs | 577 | pub(crate) fn fake_key( | CODE |
| LOW | …river/rust/crates/platform-linux/src/input/targeted.rs | 602 | fake_key(conn, true, code, root)?; | CODE |
| LOW | …river/rust/crates/platform-linux/src/input/targeted.rs | 615 | fake_key(conn, false, *code, root)?; | CODE |
| LOW⚡ | …river/rust/crates/platform-linux/src/input/targeted.rs | 642 | fake_key(conn, true, shift, root)?; | CODE |
| LOW⚡ | …river/rust/crates/platform-linux/src/input/targeted.rs | 644 | fake_key(conn, true, code, root)?; | CODE |
| LOW⚡ | …river/rust/crates/platform-linux/src/input/targeted.rs | 645 | fake_key(conn, false, code, root)?; | CODE |
| LOW⚡ | …river/rust/crates/platform-linux/src/input/targeted.rs | 647 | fake_key(conn, false, shift, root)?; | CODE |
| LOW | …river/rust/crates/platform-linux/src/input/targeted.rs | 1033 | fake_key(conn, true, code, root)?; | CODE |
| LOW | …river/rust/crates/platform-linux/src/input/targeted.rs | 1037 | fake_key(conn, false, code, root)?; | CODE |
| LOW | …er/rust/crates/platform-linux/src/input/interactive.rs | 385 | x::fake_key(&state.conn, press, code, state.root) | CODE |
| LOW | …river/rust/crates/cua-driver-core/src/text_sanitize.rs | 230 | let ok = "Lorem ipsum dolor sit amet."; | CODE |
| LOW | …river/rust/crates/cua-driver-core/src/text_sanitize.rs | 230 | let ok = "Lorem ipsum dolor sit amet."; | CODE |
| LOW | …er/rust/crates/cua-driver-core/src/browser/semantic.rs | 680 | let name = ["aria-label", "placeholder", "title", "name", "id"] | CODE |
| LOW | …iver/rust/crates/cua-driver-core/src/browser/engine.rs | 2804 | "placeholder", | CODE |
| LOW | …rust/crates/platform-windows/src/browser_consent_ui.rs | 779 | let mut nodes = prompt("placeholder", ["A", "B", "C"]); | CODE |
| LOW⚡ | …r/rust/crates/platform-windows/src/browser_setup_ui.rs | 859 | let mut checkbox = node("CheckBox", "placeholder", None, &["toggle"]); | CODE |
| LOW⚡ | …r/rust/crates/platform-windows/src/browser_setup_ui.rs | 864 | "placeholder", | CODE |
| LOW⚡ | …r/rust/crates/platform-windows/src/browser_setup_ui.rs | 869 | let mut document = node("Document", "placeholder", None, &[]); | CODE |
| LOW | …ua-driver/rust/crates/platform-macos/src/tools/page.rs | 368 | "['tagName','textContent','href','id','class','type','value','placeholder','name']" | CODE |
| LOW⚡ | libs/cua-s1/python/tests/test_checkpoint.py | 154 | config_weights.write_bytes(b"placeholder") | CODE |
| LOW | libs/cua-s1/python/src/cua_s1/synth.py | 121 | "placeholder": ( | CODE |
| LOW | libs/cua-s1/python/src/cua_s1/synth.py | 135 | "placeholder": "", | CODE |
| LOW | libs/cua-s1/python/src/cua_s1/synth.py | 249 | add(element, "fill", entity_index, field["placeholder"]) | CODE |
| LOW | libs/cua-s1/python/src/cua_s1/synth.py | 251 | add(element, "skip", placeholder=field["placeholder"]) | CODE |
| LOW⚡ | libs/python/cua-sandbox/tests/test_cloud.py | 268 | await Sandbox._create(api_key="sk-test-fake-key") | CODE |
| LOW | …box-apps/cua_sandbox_apps/apps/pgadmin/linux/launch.sh | 15 | bash -c "source $INSTALL_DIR/venv/bin/activate && (echo 'admin@example.com'; echo 'pgadmin123'; echo 'pgadmin123') | tim | CODE |
| LOW | libs/cua/crates/cua-spaces-transcript/src/jsonui.rs | 125 | ("placeholder", Node::optional_string(&value.placeholder)), | CODE |
| LOW | libs/cua/crates/cua-spaces-app-core/src/parity.rs | 383 | if let Some(p) = f["placeholder"].as_str() { | CODE |
| LOW | libs/cua/crates/cua-spaces-app-core/src/parity.rs | 650 | format!("{}: {} [{}] = {}{}{}", str_of(&f["id"]), str_of(&f["label"]), opt_str(&f["placeholder"]), str_o | CODE |
| LOW | libs/cua/crates/cua-spaces-app-core/src/parity.rs | 781 | r["placeholder"] | CODE |
| LOW | libs/cua/crates/cua-spaces-app-core/src/parity.rs | 1770 | str_of(&f["placeholder"]), | CODE |
| LOW | libs/cua/skills/gui-automation/SKILL.md | 61 | cua do click 400 200 && cua do type "Jane Doe" | CODE |
| LOW | …anscriptTests/Goldens/claude-interrupted@mid-turn.json | 45 | "placeholder" : null, | CODE |
| LOW | …ts/Goldens/claude-subagent-and-mode@subagent-done.json | 115 | "placeholder" : null, | CODE |
| LOW | …ests/Goldens/claude-subagent-and-mode@mode-manual.json | 46 | "placeholder" : null, | CODE |
| LOW | …criptTests/Goldens/claude-basic-turn@tool-running.json | 61 | "placeholder" : null, | CODE |
| LOW | …scriptTests/Goldens/claude-tool-error@read-failed.json | 67 | "placeholder" : null, | CODE |
| LOW | …ranscriptTests/Goldens/claude-basic-turn@thinking.json | 56 | "placeholder" : null, | CODE |
| LOW | …riptTests/Goldens/claude-interrupted@after-escape.json | 46 | "placeholder" : null, | CODE |
| LOW | …ranscriptTests/Goldens/claude-basic-turn@complete.json | 133 | "placeholder" : null, | CODE |
| LOW | …s/Goldens/claude-awaiting-answer@auto-mode-answer.json | 67 | "placeholder" : null, | CODE |
| LOW | …ces-sdk-swift/Sources/CuaSpacesTranscript/JSONUI.swift | 234 | ("placeholder", .optionalString(value.placeholder)), | CODE |
| LOW⚡ | libs/cua-spacesd/crates/cua-spacesd/src/remote.rs | 285 | allowed_users: vec!["user@example.com".into()], | CODE |
| LOW⚡ | libs/cua-spacesd/crates/cua-spacesd/src/remote.rs | 293 | headers.insert("tailscale-user-login", "user@example.com".parse().unwrap()); | CODE |
| LOW⚡ | libs/cua-spacesd/crates/cua-spacesd/src/remote.rs | 299 | assert_eq!(authorize(&headers, &config()).unwrap(), "user@example.com"); | CODE |
| LOW | libs/cua-spacesd/crates/cua-spacesd/src/lib.rs | 441 | allowed_users: vec!["user@example.com".into()], | CODE |
| LOW | libs/cua-spacesd/crates/cua-spacesd/src/lib.rs | 451 | HeaderValue::from_static("user@example.com"), | CODE |
| LOW⚡ | …-s1/python/src/cua_bench_s1/datagen/cua_bench_basic.py | 197 | el.getAttribute('placeholder') || el.getAttribute('title') || '') | CODE |
| LOW | libs/fleet/backend/featureflagadmin/audit_test.go | 27 | Email: "admin@example.com", | CODE |
| LOW | libs/fleet/backend/featureflagadmin/audit_test.go | 49 | "event": "feature_flag_admin", "actor": "admin-1", "actor_email": "admin@example.com", | CODE |
| LOW | libs/fleet/backend/featureflagadmin/service_test.go | 222 | actor := Actor{Subject: "admin", Email: "admin@example.com", PrincipalType: "spa", TraceID: "trace-1"} | CODE |
| LOW | libs/fleet/backend/auth/policy_middleware_test.go | 876 | request = request.WithContext(context.WithValue(request.Context(), UserKey, &User{ID: "admin-1", Email: "admin@example. | CODE |
| LOW | libs/fleet/backend/auth/policy_card_admission_test.go | 187 | {name: "email-like noncanonical identity is not admin", enabled: true, admins: []string{"admin@example.com"}, user: "u | CODE |
| 20 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …python/agent/cua_agent/callbacks/operator_validator.py | 24 | # Mutate in-place as requested, but still return the list for chaining | COMMENT |
| HIGH | libs/typescript/agent/src/client.ts | 200 | // Initialize peer connection with default options as requested | COMMENT |
| HIGH | libs/cua/crates/cua-sandbox-core/src/runtime.rs | 182 | /// The reference as requested, normalised | COMMENT |
| HIGH | libs/cua/crates/cua-sandbox-core/src/provider.rs | 138 | /// The reference as requested, normalised. | COMMENT |
| HIGH | libs/cua/crates/cua-spaces/src/space.rs | 286 | /// The image the sandbox runs (as requested) and the digest of the | COMMENT |
| HIGH | libs/cua/crates/cua-host/src/provided.rs | 110 | /// The image, as requested. | COMMENT |
| HIGH | libs/cua/crates/cua-sdk/src/native/host.rs | 241 | /// The image, as requested. | COMMENT |
| HIGH | libs/cua/crates/cua-sdk/src/native/sandbox.rs | 53 | /// The reference as requested, normalised | COMMENT |
| HIGH | …bs/fleet/sdk-bindings/go-uniffi/fleet_sdk/fleet_sdk.go | 4678 | // The ref as requested. | COMMENT |
| HIGH | libs/fleet/sdk/src/registry_secrets.rs | 68 | /// The ref as requested. | COMMENT |
| HIGH | libs/cua-bench/cua_bench/runner/batch_runner.py | 87 | # image as requested/resolved, its variant (rootfs|containerdisk|lume), | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | libs/python/core/cua_core/telemetry/otel.py | 405 | Create a trace span context. Args: name: Span name attributes: Span attributes Yields: | STRING |
| HIGH | libs/python/agent/cua_agent/computers/__init__.py | 34 | Create a computer handler from a computer interface. Args: computer: Either a ComputerHandler instance | STRING |
| HIGH | libs/python/agent/cua_agent/tools/base.py | 165 | Verify and parse the parameters as JSON. Args: params: Parameters as string or dict | STRING |
| HIGH | libs/python/agent/cua_agent/adapters/human_adapter.py | 35 | Queue a completion request and return the call ID. Args: messages: Messages in OpenAI format | STRING |
| HIGH | libs/python/agent/cua_agent/adapters/human_adapter.py | 57 | Wait for human to complete the call. Args: call_id: ID of the queued completion call Retur | STRING |
| HIGH | libs/python/agent/cua_agent/adapters/human_adapter.py | 107 | Async version of wait_for_completion. Args: call_id: ID of the queued completion call Retu | STRING |
| HIGH | …bs/cua-bench-rl/cua_bench_rl/workers/worker_manager.py | 119 | Spawn N worker servers on automatically allocated free ports. Args: n_workers: Number of worker servers to | STRING |
| HIGH | libs/cua-bench/cua_bench/actions.py | 115 | Parse an action from repr format string. Args: action_repr: Action string in repr format, e.g., "ClickActio | STRING |
| HIGH | libs/cua-bench/cua_bench/actions.py | 139 | Parse an action from snake_case format string. Args: action_str: Action string in snake_case format, e.g., | STRING |
| HIGH | libs/cua-bench/cua_bench/actions.py | 163 | Parse an action from either repr or snake_case format. This is the unified entry point for parsing action strings. | STRING |
| HIGH | libs/cua-bench/cua_bench/actions.py | 247 | Convert a dictionary to an Action object. Args: action_dict: Dictionary with 'type' key and action paramete | STRING |
| HIGH | libs/cua-bench/cua_bench/computers/remote.py | 1224 | Execute a shell command. Args: command: Shell command to execute check: With ``strict_e | STRING |
| HIGH | libs/cua-bench/cua_bench/computers/base.py | 246 | Execute a shell command on the native desktop environment. This method is only available with the native provid | STRING |
| HIGH | libs/cua-bench/cua_bench/agents/__init__.py | 28 | Load an agent class from an import path. Args: import_path: Import path in format 'module.path:ClassName' | STRING |
| HIGH | libs/cua-bench/cua_bench/agents/base.py | 99 | Render the instruction using the prompt template if provided. Args: instruction: The raw i | STRING |
| HIGH | libs/cua-bench/cua_bench/apps/kicad.py | 441 | Export a SPICE netlist from a .kicad_sch using kicad-cli. Args: schematic_path: Path to the .kicad_ | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | blog/introducing-cua-cli.md | 70 | cua auth login --api-key sk-your-api-key-here | CODE |
| HIGH | blog/introducing-cua-cli.md | 117 | api_key="your-api-key" # Or load from .env | CODE |
| HIGH | blog/introducing-cua-cli.md | 174 | export CUA_API_KEY="sk-your-api-key" | CODE |
| HIGH | blog/cloud-windows-ga-macos-preview.md | 50 | api_key="your-api-key" | CODE |
| HIGH | blog/cloud-windows-ga-macos-preview.md | 61 | provider = CloudProvider(api_key="your-api-key") | CODE |
| HIGH | …bs/python/agent/cua_agent/adapters/azure_ml_adapter.py | 28 | api_key = "your-api-key" | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | libs/lume/src/FileSystem/Settings.swift | 478 | // Don't forget to add the last location | COMMENT |
| MEDIUM | …ench/tasks/winarena_adapter/evaluators/getters/misc.py | 101 | # special case, you can add more special cases here | COMMENT |
| MEDIUM | …ench/tasks/winarena_adapter/evaluators/getters/misc.py | 193 | # you can add other replace rules here | COMMENT |
| MEDIUM | libs/cua-bench/cua_bench/processors/base.py | 188 | # This is a basic implementation - subclasses may override for custom schemas | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | libs/fleet/src/components/FirstWorkloadGuide.tsx | 47 | print(output) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | libs/cua-driver/scripts/uninstall.sh | 60 | # Usage: | COMMENT |
| LOW | libs/images/build.sh | 17 | # Usage: | COMMENT |
| LOW | libs/lume/scripts/setup-cua.sh | 23 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | libs/python/agent/cua_agent/agent.py | 800 | # TODO: implement a callback for safety checks | COMMENT |
| LOW | libs/python/agent/cua_agent/agent.py | 830 | # # TODO: implement a callback for URL safety checks | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | libs/cua-driver/examples/jev-use/python/run_native.py | 252 | async def run_task(args: argparse.Namespace, task: NativeTask) -> str: | CODE |
| LOW | …ps/cua-spaces-macos/scripts/reliability/cloud_suite.py | 447 | def run_task(): | CODE |