Home / usestrix / strix
AI Slop Code RIsk Monitor

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

20.2 Elevated pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for usestrix/strix, a Python project with 67,766 GitHub stars. SynthScan examined 123,942 lines of code across 487 source files, recording 2361 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 20.2 (Elevated pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

20.2
Adjusted Signal
20.2
Raw Pattern Score
100%
Time Factor
2026-10-09
Last Push
67.8K
Stars
Python
Language
123.9K
Lines of Code
487
Files
2.4K
Pattern Hits
2026-10-12
Scan Date
0.06
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 51.5/100 · HIGH

Can maintainers explain intent, assumptions, and trade-offs? 1815 finding(s).

Hallucinated Dependency & Supply Chain Risk 12.1/100 · LOW

Are imports declared and package/API names verified? 287 finding(s).

Agent Over-Engineering Ratio 57.2/100 · HIGH

Are wrappers, guards, and repeated structures necessary? 2004 finding(s).

PR Review Velocity Impact 64.8/100 · HIGH

Which changes need focused human review? 2361 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 2HIGH 25MEDIUM 41LOW 2293

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 2361 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers1735 hits · 1704 pts
SeverityFileLineSnippetContext
LOWstrix/interface/platform_cli.py618def _revoke_replaced_legacy_session(CODE
LOWstrix/interface/update_check.py238def prompt_update_if_available(console: Console) -> bool:CODE
LOWstrix/interface/cli.py125 def display_vulnerability_deleted(report: dict[str, Any]) -> None:CODE
LOWstrix/interface/utils.py61def format_vulnerability_report(report: dict[str, Any]) -> Text: # noqa: PLR0915CODE
LOWstrix/interface/utils.py230def _build_vulnerability_stats(stats_text: Text, report_state: Any) -> None:CODE
LOWstrix/interface/utils.py472def _derive_target_label_for_run_name(targets_info: list[dict[str, Any]] | None) -> str: # noqa: PLR0911CODE
LOWstrix/interface/utils.py701def _resolve_default_branch_name(repo_path: Path, env: dict[str, str]) -> str | None:CODE
LOWstrix/interface/utils.py875def build_diff_scope_instruction(scopes: list[RepoDiffScope]) -> str:CODE
LOWstrix/interface/utils.py944def _should_activate_auto_scope(CODE
LOWstrix/interface/utils.py1037def resolve_diff_scope_context(CODE
LOWstrix/interface/utils.py1476def rewrite_localhost_targets(targets_info: list[dict[str, Any]], host_gateway: str) -> None:CODE
LOWstrix/interface/scan_setup.py83def check_header_safe_credentials(settings: Settings) -> None:CODE
LOWstrix/interface/scan_setup.py103async def preflight_model_connection(CODE
LOWstrix/interface/main.py186def display_completion_message(args: argparse.Namespace, results_path: Path) -> None:CODE
LOWstrix/interface/main.py314def _print_model_connection_error(exc: BaseException) -> None:CODE
LOWstrix/interface/auth_cli.py206def _try_start_callback_server() -> _CallbackServer | None:CODE
LOWstrix/interface/tui/sidecar.py86def _accept_authenticated_connection(CODE
LOWstrix/interface/tui/sidecar.py135async def _launch_posix_tui_process(CODE
LOWstrix/interface/tui/sidecar.py154async def _launch_windows_tui_process(CODE
LOWstrix/interface/tui/live_view.py141 def _hydrate_sdk_session_history(self, run_dir: Path, agent_ids: Any) -> None:CODE
LOWstrix/interface/tui/live_view.py233 def _ingest_raw_response_event(self, agent_id: str, data: Any) -> None:CODE
LOWstrix/interface/tui/live_view.py240 def _ingest_session_history_item(CODE
LOWstrix/interface/tui/live_view.py295 def _record_assistant_message(self, agent_id: str, content: str, *, final: bool) -> None:CODE
LOWstrix/interface/tui/runtime.py333 def _runtime_sync_fingerprint(self) -> str:CODE
LOWstrix/interface/tui/backend/server.py398 async def _send_collection_bootstrap(CODE
LOWstrix/interface/tui/backend/server.py424 async def _send_collection_if_changed(self, name: str) -> None:CODE
LOWstrix/interface/tui/backend/messages.py17def send_user_message_to_agent(CODE
LOWstrix/interface/tui/backend/projection.py91def collection_item_projection(item: dict[str, Any]) -> dict[str, Any]:CODE
LOW…/interface/viewer/frontend/src/lib/local-run-parser.ts137function emptyVulnerabilityDefaults(): Omit<CODE
LOWstrix/interface/cloud/runner.py244def _argv_uses_raw_binary_stdout(cmd: Cmd, argv: list[str]) -> bool:CODE
LOWstrix/interface/cloud/runner.py276def _request_with_idempotency(CODE
LOWstrix/interface/cloud/runner.py310def _idempotency_response_is_retryable(response: requests.Response) -> bool:CODE
LOWstrix/interface/cloud/runner.py322def _scan_rejection_is_definitive(response: requests.Response) -> bool:CODE
LOWstrix/interface/cloud/runner.py487def _set_default_scan_engagement(body: dict[str, Any], *, has_local_source: bool = False) -> None:CODE
LOWstrix/interface/cloud/runner.py789def _interrupted_scan_launch_error(idempotency_key: str | None = None) -> http.CloudError:CODE
LOWstrix/interface/cloud/runner.py808def _ambiguous_scan_launch_error(CODE
LOWstrix/interface/cloud/runner.py840def _attach_idempotency_recovery(payload: dict[str, Any], idempotency_key: str | None) -> None:CODE
LOWstrix/interface/cloud/runner.py1067def _validated_operation_result(result: Any, cmd: Cmd) -> Any:CODE
LOWstrix/interface/cloud/billing.py531def _final_spend_request_status(stdout: str) -> str | None:CODE
LOWstrix/interface/cloud/billing.py600def _link_wallet_authenticated(npx: str) -> bool:CODE
LOWstrix/interface/cloud/render.py1039def _supply_chain_finding_rows(records: list[dict[str, Any]]) -> list[dict[str, Any]]:CODE
LOWstrix/interface/cloud/render.py1291def _vulnerability_history_rows(records: list[dict[str, Any]]) -> list[dict[str, Any]]:CODE
LOWstrix/interface/cloud/render.py1425def _print_copyable_selectors(CODE
LOWstrix/interface/cloud/render.py1557def _print_supply_chain_summary(console: Console, data: dict[str, Any]) -> None:CODE
LOWstrix/interface/cloud/render.py1579def _supply_chain_repository_rows(data: dict[str, Any]) -> list[dict[str, Any]]:CODE
LOW⚡strix/interface/cloud/render.py1605def _supply_chain_risk_summary(summary: dict[str, Any]) -> str:CODE
LOW⚡strix/interface/cloud/render.py1615def _supply_chain_severity_summary(value: Any) -> str:CODE
LOW⚡strix/interface/cloud/render.py1623def _supply_chain_scan_summary(value: Any) -> str:CODE
LOW⚡strix/interface/cloud/render.py1631def _supply_chain_policy_summary(value: Any) -> str:CODE
LOWstrix/interface/cloud/http.py140def _validate_stored_token_origin(record: dict[str, Any]) -> None:CODE
LOWstrix/interface/cloud/source_scan.py206def _validate_source_digest_approval(args: argparse.Namespace, bundle: SourceBundle) -> str | None:CODE
LOWstrix/interface/cloud/source_scan.py277def _validate_completed_upload(completed: Any, *, expected_id: str) -> None:CODE
LOWstrix/interface/cloud/source_scan.py322def _interrupted_source_upload_error(CODE
LOWstrix/interface/cloud/source_scan.py342def _retained_source_upload_error(CODE
LOWstrix/interface/cloud/source_scan.py386def _attach_idempotency_recovery(payload: dict[str, Any], idempotency_key: str | None) -> None:CODE
LOWstrix/interface/cloud/workspaces.py231def _workspace_switch_unknown(detail: str) -> http.CloudError:CODE
LOWstrix/tools/reporting/tool.py64def _normalize_code_locations(CODE
LOWstrix/tools/reporting/tool.py183def _normalize_http_exchange_ids(raw: Any) -> tuple[list[str] | None, list[str]]:CODE
LOWstrix/tools/reporting/tool.py231async def _verify_http_exchange_ids(CODE
LOWstrix/tools/reporting/tool.py303def _validate_analysis_fields(CODE
1675 more matches not shown…
Unused Imports267 hits · 247 pts
SeverityFileLineSnippetContext
LOWstrix/interface/platform_cli.py9CODE
LOWstrix/interface/cli_args.py3CODE
LOWstrix/interface/url_safety.py3CODE
LOWstrix/interface/update_check.py10CODE
LOWstrix/interface/__init__.py1CODE
LOWstrix/interface/resume_picker.py8CODE
LOWstrix/interface/completions.py3CODE
LOWstrix/interface/interactive.py3CODE
LOWstrix/interface/scan_setup.py10CODE
LOWstrix/interface/terminal_text.py3CODE
LOWstrix/interface/auth_cli.py8CODE
LOWstrix/interface/platform_identity.py3CODE
LOWstrix/interface/tui/sidecar.py3CODE
LOWstrix/interface/tui/live_view.py3CODE
LOWstrix/interface/tui/__init__.py3CODE
LOWstrix/interface/tui/runtime.py3CODE
LOWstrix/interface/tui/history.py3CODE
LOWstrix/interface/tui/backend/server.py3CODE
LOWstrix/interface/tui/backend/controller.py3CODE
LOWstrix/interface/tui/backend/live_view.py3CODE
LOWstrix/interface/tui/backend/protocol.py3CODE
LOWstrix/interface/tui/backend/__init__.py3CODE
LOWstrix/interface/tui/backend/__init__.py4CODE
LOWstrix/interface/tui/backend/messages.py3CODE
LOWstrix/interface/tui/backend/projection.py3CODE
LOWstrix/interface/viewer/auth.py12CODE
LOWstrix/interface/viewer/server.py15CODE
LOWstrix/interface/viewer/transcript.py3CODE
LOWstrix/interface/viewer/report_pdf.py14CODE
LOWstrix/interface/viewer/__init__.py7CODE
LOWstrix/interface/viewer/__init__.py9CODE
LOWstrix/interface/viewer/cli.py3CODE
LOWstrix/interface/cloud/payment_proxy.py9CODE
LOWstrix/interface/cloud/runner.py7CODE
LOWstrix/interface/cloud/billing.py3CODE
LOWstrix/interface/cloud/render.py3CODE
LOWstrix/interface/cloud/arguments.py3CODE
LOWstrix/interface/cloud/session.py3CODE
LOWstrix/interface/cloud/__init__.py9CODE
LOWstrix/interface/cloud/spec.py8CODE
LOWstrix/interface/cloud/http.py3CODE
LOWstrix/interface/cloud/source_scan.py3CODE
LOWstrix/interface/cloud/source_upload.py3CODE
LOWstrix/interface/cloud/workspaces.py9CODE
LOWstrix/tools/output_store.py9CODE
LOWstrix/tools/nullish.py8CODE
LOWstrix/tools/reporting/tool.py8CODE
LOWstrix/tools/web_search/tool.py3CODE
LOWstrix/tools/proxy/tools.py3CODE
LOWstrix/tools/proxy/caido_api.py3CODE
LOWstrix/tools/threat_model/tools.py17CODE
LOWstrix/tools/mcp/config.py8CODE
LOWstrix/tools/mcp/naming.py8CODE
LOWstrix/tools/mcp/registry.py23CODE
LOWstrix/tools/mcp/client.py15CODE
LOWstrix/tools/mcp/session.py46CODE
LOWstrix/tools/mcp/__init__.py3CODE
LOWstrix/tools/mcp/__init__.py5CODE
LOWstrix/tools/mcp/__init__.py5CODE
LOWstrix/tools/mcp/__init__.py5CODE
207 more matches not shown…
Excessive Try-Catch Wrapping112 hits · 119 pts
SeverityFileLineSnippetContext
LOWstrix/interface/cli_args.py33 except Exception:CODE
LOWstrix/interface/cli_args.py363 except Exception as e:STRING
MEDIUMstrix/interface/cli_args.py28def get_version() -> str:CODE
LOWstrix/interface/update_check.py114 except Exception: # noqa: BLE001CODE
LOWstrix/interface/update_check.py133 except Exception: # noqa: BLE001CODE
LOWstrix/interface/update_check.py152 except Exception: # noqa: BLE001, S110CODE
LOWstrix/interface/update_check.py163 except Exception: # noqa: BLE001, S110CODE
LOWstrix/interface/update_check.py368 except Exception:CODE
LOWstrix/interface/update_check.py373 except Exception:CODE
LOWstrix/interface/update_check.py415 except Exception as e: # noqa: BLE001CODE
MEDIUMstrix/interface/update_check.py97def _fetch_latest_version() -> str | None:CODE
MEDIUMstrix/interface/update_check.py146def _read_cache() -> dict[str, object]:CODE
LOWstrix/interface/cli.py206 except Exception:CODE
LOWstrix/interface/cli.py236 except Exception as e:CODE
LOWstrix/interface/utils.py486 except Exception:CODE
LOWstrix/interface/utils.py502 except Exception:CODE
LOWstrix/interface/utils.py514 except Exception:CODE
LOWstrix/interface/main.py181 except Exception as exc:CODE
LOWstrix/interface/main.py520 except Exception as exc:CODE
LOWstrix/interface/auth_cli.py135 except Exception: # noqa: BLE001 - opening a browser is best-effortCODE
LOWstrix/interface/tui/runtime.py138 except Exception as exc:CODE
LOWstrix/interface/tui/runtime.py153 except Exception as exc:CODE
LOWstrix/interface/tui/runtime.py202 except Exception as exc:CODE
LOWstrix/interface/tui/runtime.py241 except Exception as exc:CODE
LOWstrix/interface/tui/runtime.py360 except Exception as exc:CODE
LOWstrix/interface/tui/runtime.py440 except Exception as exc:CODE
LOWstrix/interface/tui/backend/server.py238 except Exception as exc: # noqa: BLE001 - command failures are protocol resultsCODE
MEDIUMstrix/interface/tui/backend/server.py157def _read_loop(self) -> None:CODE
LOWstrix/interface/tui/backend/controller.py364 except Exception as exc:CODE
LOWstrix/interface/tui/backend/controller.py490 except Exception: # noqa: BLE001 - viewer startup failures must not crash the TUICODE
LOWstrix/interface/tui/backend/messages.py47 except Exception:CODE
LOWstrix/interface/tui/backend/messages.py57 except Exception:CODE
LOWstrix/interface/viewer/server.py166 except Exception:CODE
LOWstrix/interface/viewer/server.py192 except Exception:CODE
LOWstrix/interface/viewer/server.py612 except Exception: # noqa: BLE001 - launching the browser is best-effortCODE
LOWstrix/tools/reporting/tool.py149 except Exception as exc:CODE
LOWstrix/tools/reporting/tool.py248 except Exception: # noqa: BLE001CODE
LOWstrix/tools/reporting/tool.py663 except Exception as e:CODE
LOWstrix/tools/reporting/tool.py739 except Exception as e:CODE
LOWstrix/tools/reporting/tool.py940 except Exception as e:CODE
LOWstrix/tools/reporting/tool.py2061 except Exception as e:CODE
LOWstrix/tools/web_search/tool.py222 except Exception:CODE
LOWstrix/tools/proxy/tools.py59 except Exception: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py103 except Exception: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py265 except Exception as exc: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py347 except Exception as exc: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py452 except Exception as exc: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py520 except Exception as exc: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py548 except Exception as exc: # noqa: BLE001CODE
LOWstrix/tools/proxy/tools.py678 except Exception as exc: # noqa: BLE001CODE
LOWstrix/tools/proxy/caido_api.py256 except Exception: # noqa: BLE001 - tolerate any malformed raw bytes; None signals "unparseable" to the caller.CODE
LOWstrix/tools/mcp/session.py277 except Exception:CODE
LOWstrix/tools/todo/tools.py99 except Exception:CODE
LOWstrix/tools/notes/tools.py107 except Exception:CODE
LOWstrix/tools/agents_graph/tools.py586 except Exception as e:CODE
LOWstrix/llm/context_budget.py42 except Exception: # noqa: BLE001 - unmapped models raise; caller falls back.CODE
LOWstrix/llm/context_budget.py88 except Exception: # noqa: BLE001 - tokenizer may be unavailable for some models.CODE
LOWstrix/llm/warmup.py38 except Exception: # noqa: BLE001 - a failed warm-up must never fail the run.CODE
LOWstrix/llm/compaction.py329 except Exception:CODE
LOWstrix/llm/request_log.py232 except Exception:CODE
52 more matches not shown…
Modern Structural Boilerplate100 hits · 102 pts
SeverityFileLineSnippetContext
LOWstrix/interface/update_check.py36logger = logging.getLogger(__name__)CODE
LOWstrix/interface/__init__.py4__all__ = ["main"]CODE
LOWstrix/interface/cli.py29logger = logging.getLogger(__name__)CODE
LOWstrix/interface/cli.py201 def update_status() -> None:CODE
LOWstrix/interface/utils.py26logger = logging.getLogger(__name__)CODE
LOWstrix/interface/utils.py1642def update_layer_status(layers_info: dict[str, str], layer_id: str, layer_status: str) -> None:CODE
LOWstrix/interface/interactive.py13logger = logging.getLogger(__name__)CODE
LOWstrix/interface/interactive.py42__all__ = [CODE
LOWstrix/interface/environment.py20logger = logging.getLogger(__name__)CODE
LOWstrix/interface/scan_setup.py51logger = logging.getLogger(__name__)CODE
LOWstrix/interface/main.py60logger = logging.getLogger(__name__)CODE
LOWstrix/interface/auth_cli.py31logger = logging.getLogger(__name__)CODE
LOWstrix/interface/auth_cli.py419__all__ = ["run_auth"]CODE
LOWstrix/interface/tui/live_view.py48 def set_user_instruction(self, text: str | None, *, timestamp: str | None = None) -> None:CODE
LOWstrix/interface/tui/__init__.py6__all__ = ["TuiLiveView"]CODE
LOWstrix/interface/tui/runtime.py49logger = logging.getLogger(__name__)CODE
LOWstrix/interface/tui/history.py18logger = logging.getLogger(__name__)CODE
LOWstrix/interface/tui/backend/server.py30logger = logging.getLogger(__name__)CODE
LOWstrix/interface/tui/backend/controller.py119 def set_change_callback(self, callback: ChangeCallback) -> None:CODE
LOWstrix/interface/tui/backend/controller.py137 def set_mcp_connections(self, roster: list[dict[str, Any]]) -> None:CODE
LOWstrix/interface/tui/backend/__init__.py7__all__ = ["TuiBackendServer", "TuiController"]CODE
LOWstrix/interface/tui/backend/messages.py14logger = logging.getLogger(__name__)CODE
LOWstrix/interface/viewer/auth.py28logger = logging.getLogger(__name__)CODE
LOWstrix/interface/viewer/auth.py251__all__ = [CODE
LOWstrix/interface/viewer/server.py45logger = logging.getLogger(__name__)CODE
LOWstrix/interface/viewer/server.py616__all__ = ["authorized_url", "bundle_dir", "bundle_is_built", "serve"]CODE
LOWstrix/interface/viewer/transcript.py17logger = logging.getLogger(__name__)CODE
LOWstrix/interface/viewer/transcript.py97__all__ = [CODE
LOWstrix/interface/viewer/report_pdf.py700__all__ = [CODE
LOWstrix/interface/viewer/__init__.py12__all__ = ["serve"]CODE
LOWstrix/interface/viewer/cli.py28logger = logging.getLogger(__name__)CODE
LOWstrix/interface/viewer/cli.py158__all__ = ["run_view"]CODE
LOWstrix/interface/cloud/runner.py487def _set_default_scan_engagement(body: dict[str, Any], *, has_local_source: bool = False) -> None:CODE
LOWstrix/tools/output_store.py20logger = logging.getLogger(__name__)CODE
LOWstrix/tools/reporting/tool.py27logger = logging.getLogger(__name__)CODE
LOWstrix/tools/web_search/tool.py21logger = logging.getLogger(__name__)CODE
LOWstrix/tools/proxy/tools.py22logger = logging.getLogger(__name__)CODE
LOWstrix/tools/proxy/caido_api.py753__all__ = [CODE
LOWstrix/tools/threat_model/tools.py36logger = logging.getLogger(__name__)CODE
LOWstrix/tools/mcp/registry.py133 def set_status_sink(self, sink: Callable[[], None] | None) -> None:CODE
LOWstrix/tools/mcp/registry.py138 def _set_state(self, state: McpConnectionState) -> None:CODE
LOWstrix/tools/mcp/registry.py428 def set_status_sink(self, sink: Callable[[], None] | None) -> None:CODE
LOWstrix/tools/mcp/client.py59logger = logging.getLogger(__name__)CODE
LOWstrix/tools/mcp/session.py78logger = logging.getLogger(__name__)CODE
LOWstrix/tools/mcp/session.py243 def set_on_dead(self, callback: Callable[[], None] | None) -> None:CODE
LOWstrix/tools/mcp/__init__.py43__all__ = [CODE
LOWstrix/tools/mcp/loader.py27logger = logging.getLogger(__name__)CODE
LOWstrix/tools/wait_for_user/__init__.py6__all__ = ["wait_for_user"]CODE
LOWstrix/tools/todo/tools.py17logger = logging.getLogger(__name__)CODE
LOWstrix/tools/notes/tools.py20logger = logging.getLogger(__name__)CODE
LOWstrix/tools/finish/tool.py15logger = logging.getLogger(__name__)CODE
LOWstrix/tools/agents_graph/tools.py22logger = logging.getLogger(__name__)CODE
LOWstrix/llm/context_budget.py14logger = logging.getLogger(__name__)CODE
LOWstrix/llm/warmup.py23logger = logging.getLogger(__name__)CODE
LOWstrix/llm/compaction.py32logger = logging.getLogger(__name__)CODE
LOWstrix/llm/request_log.py62logger = logging.getLogger(__name__)CODE
LOWstrix/llm/request_log.py146def set_retry_attempt(attempt: int) -> None:CODE
LOWstrix/llm/request_log.py1430__all__ = [CODE
LOWstrix/core/sessions.py24logger = logging.getLogger(__name__)CODE
LOWstrix/core/runner.py71logger = logging.getLogger(__name__)CODE
40 more matches not shown…
Decorative Section Separators30 hits · 88 pts
SeverityFileLineSnippetContext
MEDIUMpyproject.toml99# ============================================================================COMMENT
MEDIUMpyproject.toml101# ============================================================================COMMENT
MEDIUMpyproject.toml146# ============================================================================COMMENT
MEDIUMpyproject.toml148# ============================================================================COMMENT
MEDIUMpyproject.toml346# ============================================================================COMMENT
MEDIUMpyproject.toml348# ============================================================================COMMENT
MEDIUMpyproject.toml376# ============================================================================COMMENT
MEDIUMpyproject.toml378# ============================================================================COMMENT
MEDIUMpyproject.toml398# ============================================================================STRING
MEDIUMpyproject.toml400# ============================================================================STRING
MEDIUMpyproject.toml413# ============================================================================STRING
MEDIUMpyproject.toml415# ============================================================================STRING
MEDIUM⚡strix/report/sarif.py382# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡strix/report/sarif.py384# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡strix/report/sarif.py1150# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡strix/report/sarif.py1152# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py196# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py198# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py424# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py426# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py641# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py643# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py750# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py752# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py857# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py859# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py1113# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py1115# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py1168# ---------------------------------------------------------------------------COMMENT
MEDIUMstrix/report/sarif.py1170# ---------------------------------------------------------------------------COMMENT
Empty Error Handlers17 hits · 85 pts
SeverityFileLineSnippetContext
HIGHstrix/interface/url_safety.py41except ValueError:CODE
HIGHstrix/interface/update_check.py152except Exception: # noqa: BLE001, S110CODE
HIGHstrix/interface/update_check.py163except Exception: # noqa: BLE001, S110CODE
HIGHstrix/interface/utils.py1178except ValueError:CODE
HIGHstrix/interface/utils.py1470except ValueError:CODE
HIGHstrix/interface/platform_identity.py31except (OSError, json.JSONDecodeError):CODE
HIGHstrix/interface/viewer/auth.py79except ValueError:CODE
HIGHstrix/interface/cloud/payment_proxy.py83except ValueError:CODE
HIGHstrix/interface/cloud/http.py116except CloudError:CODE
HIGHstrix/interface/cloud/http.py242except ValueError:CODE
HIGHstrix/tools/mcp/failures.py54except ValueError:CODE
HIGHstrix/utils/secret_files.py41except FileNotFoundError:CODE
HIGHstrix/report/sarif.py1133except (TypeError, ValueError):CODE
HIGHstrix/report/writer.py95except ClassNotFound:CODE
HIGHstrix/telemetry/_common.py44except Exception: # noqa: BLE001, S110CODE
HIGHstrix/telemetry/posthog.py119except (TypeError, ValueError, AttributeError):CODE
HIGHstrix/telemetry/scarf.py122except (TypeError, ValueError, AttributeError):CODE
Deep Nesting53 hits · 51 pts
SeverityFileLineSnippetContext
LOWstrix/interface/cli_args.py59CODE
LOWstrix/interface/update_check.py119CODE
LOWstrix/interface/update_check.py315CODE
LOWstrix/interface/cli.py41CODE
LOWstrix/interface/utils.py61CODE
LOWstrix/interface/utils.py875CODE
LOWstrix/interface/utils.py1476CODE
LOWstrix/interface/utils.py1642CODE
LOWstrix/interface/utils.py1655CODE
LOWstrix/interface/environment.py34CODE
LOWstrix/interface/tui/runtime.py279CODE
LOWstrix/interface/viewer/server.py147CODE
LOWstrix/interface/viewer/server.py171CODE
LOWstrix/interface/viewer/server.py237CODE
LOWstrix/interface/viewer/transcript.py63CODE
LOWstrix/interface/cloud/runner.py333CODE
LOWstrix/interface/cloud/runner.py908CODE
LOWstrix/interface/cloud/runner.py950CODE
LOWstrix/interface/cloud/billing.py287CODE
LOWstrix/interface/cloud/render.py716CODE
LOWstrix/interface/cloud/render.py795CODE
LOWstrix/interface/cloud/render.py936CODE
LOWstrix/interface/cloud/render.py978CODE
LOWstrix/interface/cloud/render.py1291CODE
LOWstrix/interface/cloud/http.py214CODE
LOWstrix/interface/cloud/source_upload.py369CODE
LOWstrix/interface/cloud/source_upload.py434CODE
LOWstrix/interface/cloud/source_upload.py588CODE
LOWstrix/tools/reporting/tool.py64CODE
LOWstrix/tools/reporting/tool.py94CODE
LOWstrix/tools/proxy/tools.py136CODE
LOWstrix/tools/proxy/caido_api.py294CODE
LOWstrix/tools/proxy/caido_api.py510CODE
LOWstrix/tools/mcp/session.py300CODE
LOWstrix/tools/mcp/session.py495CODE
LOWstrix/tools/mcp/failures.py65CODE
LOWstrix/tools/mcp/agent_tools.py142CODE
LOWstrix/tools/notes/tools.py290CODE
LOWstrix/llm/compaction.py146CODE
LOWstrix/core/runner.py200CODE
LOWstrix/core/execution.py755CODE
LOWstrix/core/inputs.py108CODE
LOWstrix/config/models.py1067CODE
LOWstrix/config/tool_call_ids.py48CODE
LOWstrix/config/loader.py106CODE
LOWstrix/runtime/caido_bootstrap.py32CODE
LOWstrix/agents/factory.py351CODE
LOWstrix/report/writer.py223CODE
LOWstrix/skills/__init__.py67CODE
LOWstrix/telemetry/logging.py161CODE
LOWstrix/telemetry/logging.py203CODE
LOWtests/test_tui_backend_server.py105CODE
LOWtests/test_tui_backend_server.py398CODE
Hallucination Indicators2 hits · 30 pts
SeverityFileLineSnippetContext
CRITICAL⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js425`,f="/",p="*",g="",b="comment",y="declaration";function _(S,w){if(typeof S!="string")throw new TypeError("First argumentCODE
CRITICAL⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js452`))}function h(y,_,N,S){const w=N.enter("tableCell"),C=N.enter("phrasing"),E=N.containerPhrasing(y,{...S,before:o,after:CODE
Magic Placeholder Names4 hits · 20 pts
SeverityFileLineSnippetContext
HIGHREADME.md88export LLM_API_KEY="your-api-key"CODE
HIGHREADME.md288export LLM_API_KEY="your-api-key"CODE
HIGHCONTRIBUTING.md35 export LLM_API_KEY="your-api-key"CODE
HIGHscripts/install.sh339echo -e " ${MUTED}export LLM_API_KEY='your-api-key'${NC}"CODE
Fake / Example Data11 hits · 13 pts
SeverityFileLineSnippetContext
LOW⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js424 */const UT=[["path",{d:"M4 14a1 1 0 0 1-.78-1.63l9.9-10.2a.5.5 0 0 1 .86.46l-1.92 6.02A1 1 0 0 0 13 10h7a1 1 0 0 1 .78 COMMENT
LOW⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js454`,1;if(al>1e5&&al>Re.index*3)throw new Error("potential infinite loop, way more iterations than matches");return xt+=Ye,CODE
LOW⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js455`},_]}}return em=s,em}var tm,Ev;function kj(){if(Ev)return tm;Ev=1;const e=p=>({IMPORTANT:{scope:"meta",begin:"!importanCODE
LOW⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js456]`,N={scope:"string",variants:[g,p,b,y]},S={scope:"number",variants:[{begin:"\\b0[bB][01]+(?:_[01]+)*\\b"},{begin:"\\b0[CODE
LOWstrix/skills/tooling/agent_browser.md202agent-browser fill @e3 "user@example.com"CODE
LOWtests/test_cloud_cli.py2317 "username": "admin@example.com",CODE
LOWtests/test_cloud_cli.py2330 "admin@example.com",CODE
LOWtests/test_cloud_cli.py2736 "username": "admin@example.com",CODE
LOWtests/test_cloud_cli.py3469 "username": "admin@example.com",CODE
LOW⚡tests/test_viewer_auth.py33 auth.write_auth(email="user@example.com", token="tok-123", verified_at=_iso(timedelta(days=30))) # nosec B106CODE
LOW⚡tests/test_viewer_auth.py37 assert record["email"] == "user@example.com"CODE
Cross-Language Confusion3 hits · 10 pts
SeverityFileLineSnippetContext
HIGHstrix/interface/viewer/cli.py65 "Build it with: [cyan]cd strix/interface/viewer/frontend && npm ci && npm run build[/]"CODE
HIGHtests/test_viewer.py188 session_id text not null,STRING
HIGHtests/test_viewer.py189 message_data text not null,STRING
AI Slop Vocabulary3 hits · 10 pts
SeverityFileLineSnippetContext
MEDIUMpyproject.toml164# Enable comprehensive rule setsCOMMENT
MEDIUMstrix/interface/viewer/static/assets/index-B1JzV4Vu.js49`).replace(nk,"")}function v0(n,i){return i=y0(i),y0(n)===i}function Et(n,i,l,u,x,v){switch(l){case"children":typeof u==CODE
MEDIUM⚡strix/interface/viewer/static/assets/index-B1JzV4Vu.js424 */const UT=[["path",{d:"M4 14a1 1 0 0 1-.78-1.63l9.9-10.2a.5.5 0 0 1 .86.46l-1.92 6.02A1 1 0 0 0 13 10h7a1 1 0 0 1 .78 COMMENT
Over-Commented Block8 hits · 8 pts
SeverityFileLineSnippetContext
LOWstrix/interface/tui/live_view.py441def _session_message_text(item: dict[str, Any]) -> str:COMMENT
LOWstrix/interface/tui/internal/app/view.go381// inherit an unreadable foreground from the user's terminal profile.COMMENT
LOWstrix/interface/tui/internal/app/view.go701 b.WriteString(lipgloss.NewStyle().Bold(true).Foreground(white).Render("Caido: ") + w.Render(caido))COMMENT
LOWstrix/interface/tui/internal/render/mcp.go1package renderCOMMENT
LOWstrix/interface/viewer/server.py121 assets_dir: Path,COMMENT
LOWstrix/runtime/docker_client.py281 # Best-effort kill: NotFound/APIError cover a gone or unhappyCOMMENT
LOWstrix/report/coverage.py61_INCOMPLETE_RUN_STATUSES = frozenset({"failed", "interrupted", "stopped", "running"})COMMENT
LOWstrix/report/sarif.py101COMMENT
AI Structural Patterns10 hits · 7 pts
SeverityFileLineSnippetContext
LOWstrix/tools/reporting/tool.py982CODE
LOWstrix/tools/reporting/tool.py1464CODE
LOWstrix/tools/reporting/tool.py1786CODE
LOWstrix/tools/reporting/tool.py1886CODE
LOWstrix/tools/reporting/tool.py2088CODE
LOWstrix/core/runner.py200CODE
LOWstrix/agents/factory.py663CODE
LOWstrix/agents/factory.py757CODE
LOWstrix/agents/prompt.py78CODE
LOWstrix/report/state.py330CODE
Modern AI Meta-Vocabulary2 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMstrix/skills/vulnerabilities/llm_prompt_injection.md111### LlamaIndex / RAG PipelinesCOMMENT
MEDIUMstrix/skills/vulnerabilities/llm_prompt_injection.md130### RAG PoisoningCOMMENT
Docstring Block Structure1 hit · 5 pts
SeverityFileLineSnippetContext
HIGHstrix/tools/proxy/tools.py145List captured HTTP requests from the Caido proxy with HTTPQL filtering. Caido HTTPQL syntax (operators differ by fiSTRING
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMstrix/tools/proxy/caido_api.py342 # Create an empty replay session, then dispatch via ``send()``.COMMENT
Structural Annotation Overuse2 hits · 3 pts
SeverityFileLineSnippetContext
LOWstrix/skills/technologies/grafana_prometheus.md96# Step 1: create/edit a data source with an attacker-chosen base URL, e.g.COMMENT
LOWstrix/skills/technologies/grafana_prometheus.md99# Step 2: relay through THAT data source's id (path appended to its base URL):COMMENT