0.9

Adjusted Signal

0.9

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

45.0K

Stars

Rust

Language

199.4K

Lines of Code

421

Files

118

Pattern Hits

2026-10-31

Scan Date

0.02

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 2.3/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 72 finding(s).

Hallucinated Dependency & Supply Chain Risk 1.9/100 · LOW

Are imports declared and package/API names verified? 40 finding(s).

Agent Over-Engineering Ratio 0.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 15 finding(s).

PR Review Velocity Impact 4.3/100 · LOW

Which changes need focused human review? 118 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 8MEDIUM 8LOW 102

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 118 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block47 hits · 47 pts

Severity	File	Line	Snippet	Context
LOW	cli/src/ca_bundle.rs	1	//! Loading the CA certificates named by `--ca-cert`.	COMMENT
LOW	cli/src/skills.rs	21	///	COMMENT
LOW	cli/src/commands.rs	181		COMMENT
LOW	cli/src/session_files.rs	1	//! Per-session files in the socket directory.	COMMENT
LOW	cli/src/connection.rs	301	.filter(\|s\| !s.is_empty())	COMMENT
LOW	cli/src/connection.rs	861	// Socket connectivity is the sole liveness check — no PID check — so	COMMENT
LOW	cli/src/connection.rs	1201	\|\| has_os_error(error, 61) // Connection refused (macOS)	COMMENT
LOW	cli/src/tls.rs	1	//! Trust roots for the CLI's own HTTPS requests.	COMMENT
LOW	cli/src/native/actions.rs	541	/// removing it from a particular target.	COMMENT
LOW	cli/src/native/actions.rs	561	/// Last `Emulation.setEmulatedMedia` call: `--color-scheme` at launch or	COMMENT
LOW	cli/src/native/actions.rs	681	pub active_frame_id: Option<String>,	COMMENT
LOW	cli/src/native/actions.rs	701	pub proxy_credentials: Arc<RwLock<Option<(String, String)>>>,	COMMENT
LOW	cli/src/native/actions.rs	721	pub pending_pointer_release: Option<super::interaction::PendingRelease>,	COMMENT
LOW	cli/src/native/actions.rs	741	network_auto_attach_installed: bool,	COMMENT
LOW	cli/src/native/actions.rs	3521	// ---------------------------------------------------------------------------	COMMENT
LOW	cli/src/native/actions.rs	10581	None => format!("getByRole('{}')", role),	COMMENT
LOW	cli/src/native/e2e_tests.rs	3521	wait_resp["error"].as_str().is_some_and(\|error\| {	COMMENT
LOW	cli/src/native/e2e_tests.rs	9101	result,	COMMENT
LOW	cli/src/native/e2e_tests.rs	9181		COMMENT
LOW	cli/src/native/e2e_tests.rs	14041	let resp = current_url(&mut state_b, "b-url").await;	COMMENT
LOW	cli/src/native/interaction.rs	1221	/// The Windows virtual-key codes (VK_OEM_*) differ from ASCII values for	COMMENT
LOW	cli/src/native/daemon.rs	161	process::exit(1);	COMMENT
LOW	cli/src/native/daemon.rs	881	let _ = tokio::time::timeout(Duration::from_secs(1), state.lock())	COMMENT
LOW	cli/src/native/browser.rs	261	// Load-state timeouts already name the state and the budget that	COMMENT
LOW	cli/src/native/browser.rs	281	/// payload, and "verify the selector is correct" is misleading advice for	COMMENT
LOW	cli/src/native/browser.rs	501	/// Origins visited during this session, used by save_state to collect cross-origin localStorage.	COMMENT
LOW	cli/src/native/browser.rs	4401	/// that both `apply_drained_events` drain handlers in cli/src/native/actions.rs	COMMENT
LOW	cli/src/native/tab_binding.rs	1	//! Persistent session to tab binding.	COMMENT
LOW	cli/src/native/tab_binding.rs	21	use std::io::Write;	COMMENT
LOW	cli/src/native/cdp/types.rs	481	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	cli/src/native/cdp/types.rs	561	#[serde(skip_serializing_if = "Option::is_none")]	COMMENT
LOW	cli/src/native/cdp/types.rs	581	/// <https://github.com/nicolo-ribaudo/nicolo-ribaudo.github.io/> (or any	COMMENT
LOW	cli/src/native/cdp/chrome.rs	161	}	COMMENT
LOW	cli/src/native/cdp/chrome.rs	361	pub use_real_keychain: bool,	COMMENT
LOW	cli/src/native/stream/mod.rs	21		COMMENT
LOW	cli/src/native/stream/websocket.rs	21		COMMENT
LOW	cli/src/native/react/mod.rs	1	//! React/web introspection primitives.	COMMENT
LOW	cli/src/native/react/scripts.rs	1	//! Browser-side evaluation scripts for React/web introspection.	COMMENT
LOW	cli/src/native/react/renders.rs	1	//! React fiber render profiler report formatter.	COMMENT
LOW	cli/src/doctor/webgpu.rs	1	//! WebGPU probe: spawn a scratch daemon session with the WebGPU preset	COMMENT
LOW	examples/eve/agent/extensions/browser.ts	1	import browser from "@agent-browser/eve";	COMMENT
LOW	skill-data/core/templates/capture-workflow.sh	1	#!/bin/bash	COMMENT
LOW	skill-data/core/templates/form-automation.sh	1	#!/bin/bash	COMMENT
LOW	skill-data/core/templates/form-automation.sh	21	agent-browser open "$FORM_URL"	COMMENT
LOW	skill-data/core/templates/authenticated-session.sh	1	#!/bin/bash	COMMENT
LOW	skill-data/core/templates/authenticated-session.sh	81	# : "${APP_PASSWORD:?Set APP_PASSWORD environment variable}"	COMMENT
LOW	skill-data/core/templates/authenticated-session.sh	101	# agent-browser close	COMMENT

Magic Placeholder Names7 hits · 40 pts

Severity	File	Line	Snippet	Context
HIGH⚡	README.md	1994	export BROWSERBASE_API_KEY="your-api-key"	CODE
HIGH⚡	README.md	2002	export BROWSERBASE_API_KEY="your-api-key"	CODE
HIGH	README.md	2017	export BROWSER_USE_API_KEY="your-api-key"	CODE
HIGH	README.md	2025	export BROWSER_USE_API_KEY="your-api-key"	CODE
HIGH	README.md	2063	export KERNEL_API_KEY="your-api-key"	CODE
HIGH	README.md	2071	export KERNEL_API_KEY="your-api-key"	CODE
HIGH	skill-data/core/references/commands.md	605	BROWSER_USE_API_KEY="your-api-key" # Browser Use Cloud API key	CODE

Fake / Example Data33 hits · 36 pts

Severity	File	Line	Snippet	Context
LOW	README.md	263	agent-browser find label "Email" fill "test@test.com"	CODE
LOW	README.md	1361	agent-browser find label "Email" fill "test@test.com"	CODE
LOW	README.md	1401	agent-browser fill @e1 "user@example.com" && agent-browser fill @e2 "pass" && agent-browser click @e3	CODE
LOW	evals/cases/command-usage.ts	48	"Go to example.com/signup, fill in name as 'Jane Doe' and email as 'jane@test.com', then submit",	CODE
LOW	cli/src/commands.rs	3084	"placeholder",	CODE
LOW	cli/src/commands.rs	3099	"role" \| "text" \| "label" \| "placeholder" \| "alt" \| "title" \| "testid" \| "first"	CODE
LOW	cli/src/commands.rs	3107	"placeholder" => "find placeholder <text> [action] [text] [--exact]",	CODE
LOW	cli/src/commands.rs	3176	"placeholder" => {	CODE
LOW	cli/src/commands.rs	3177	let mut cmd = json!({ "id": id, "action": "getbyplaceholder", "placeholder": value, "subaction": sub	CODE
LOW	cli/src/output.rs	1835	agent-browser fill "#email" "user@example.com"	CODE
LOW	cli/src/output.rs	2502	agent-browser find label "Email" fill "user@example.com"	CODE
LOW	cli/src/output.rs	4382	agent-browser fill @e1 "user@example.com" && agent-browser fill @e2 "pass" && agent-browser click @e3	CODE
LOW	cli/src/mcp.rs	1189	"locator": { "type": "string", "enum": ["role", "text", "label", "placeholder", "alt", "title", "testid"	CODE
LOW	cli/src/native/actions.rs	11008	"placeholder" => format!(	CODE
LOW	cli/src/native/actions.rs	11105	handle_semantic_locator(cmd, state, "placeholder", "placeholder").await	CODE
LOW	cli/src/native/e2e_tests.rs	2176	&json!({ "id": "10", "action": "fill", "selector": "#name", "value": "John Doe" }),	CODE
LOW	cli/src/native/e2e_tests.rs	2189	assert_eq!(get_data(&resp)["result"], "John Doe");	CODE
LOW	cli/src/native/e2e_tests.rs	2260	snap.contains("John Doe"),	CODE
LOW	cli/src/native/e2e_tests.rs	8471	"username": "user@example.com",	CODE
LOW	cli/src/native/e2e_tests.rs	8505	assert_eq!(result["user"], "user@example.com");	CODE
LOW	cli/src/native/stream/chat.rs	442	"placeholder",	CODE
LOW	cli/src/native/a11y/axe.min.js	12	!function a(window){var q=window,document=window.document;function te(e){return(te="function"==typeof Symbol&&"symbol"==	CODE
LOW	skill-data/core/SKILL.md	238	agent-browser fill @e3 "user@example.com"	CODE
LOW	skill-data/core/references/authentication.md	139	agent-browser fill @e1 "user@example.com"	CODE
LOW	skill-data/core/references/authentication.md	259	agent-browser fill @e1 "user@example.com"	CODE
LOW	skill-data/core/references/authentication.md	316	agent-browser fill @e1 "user@example.com"	CODE
LOW	skill-data/core/references/snapshot-refs.md	74	agent-browser fill @e10 "user@example.com"	CODE
LOW	skill-data/core/references/session-management.md	39	agent-browser --session auth fill @e1 "user@example.com"	CODE
LOW⚡	skill-data/core/templates/form-automation.sh	33	# agent-browser fill @e1 "John Doe" # Text input	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	34	# agent-browser fill @e2 "user@example.com" # Email input	COMMENT
LOW	skill-data/agentcore/SKILL.md	51	agent-browser fill @e1 "user@example.com"	CODE
LOW	skill-data/dogfood/references/issue-taxonomy.md	65	- Placeholder or lorem ipsum content left in	CODE
LOW	packages/@agent-browser/sandbox/mcp-tools.json	4175	"placeholder",	CODE

Decorative Section Separators6 hits · 18 pts

Severity	File	Line	Snippet	Context
MEDIUM	skill-data/core/templates/authenticated-session.sh	32	# ================================================================	COMMENT
MEDIUM	skill-data/core/templates/authenticated-session.sh	34	# ================================================================	COMMENT
MEDIUM	skill-data/core/templates/authenticated-session.sh	54	# ================================================================	COMMENT
MEDIUM	skill-data/core/templates/authenticated-session.sh	56	# ================================================================	COMMENT
MEDIUM	skill-data/core/templates/authenticated-session.sh	77	# ================================================================	COMMENT
MEDIUM	skill-data/core/templates/authenticated-session.sh	79	# ================================================================	COMMENT

Verbosity Indicators5 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW⚡	skill-data/core/templates/form-automation.sh	20	# Step 1: Navigate to form	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	25	# Step 2: Snapshot to discover form elements	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	30	# Step 3: Fill form fields (customize these refs based on snapshot output)	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	47	# Step 4: Wait for submission	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	51	# Step 5: Verify result	COMMENT

Structural Annotation Overuse5 hits · 11 pts

Severity	File	Line	Snippet	Context
LOW⚡	skill-data/core/templates/form-automation.sh	20	# Step 1: Navigate to form	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	25	# Step 2: Snapshot to discover form elements	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	30	# Step 3: Fill form fields (customize these refs based on snapshot output)	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	47	# Step 4: Wait for submission	COMMENT
LOW⚡	skill-data/core/templates/form-automation.sh	51	# Step 5: Verify result	COMMENT

Hyper-Verbose Identifiers9 hits · 9 pts

Severity	File	Line	Snippet	Context
LOW	cli/src/native/react/installHook.js	27	(()=>{var e={4659:(e,t,n)=>{"use strict";var r=n(8715),o=n(1147),s=Object.assign,i=o.__CLIENT_INTERNALS_DO_NOT_USE_OR_WA	CODE
LOW	packages/@agent-browser/sandbox/src/shared.ts	61	export function resolveAgentBrowserInstallSpec(options: AgentBrowserInstallOptions = {}): string {	CODE
LOW	packages/@agent-browser/sandbox/src/vercel.ts	153	export async function installAgentBrowserInVercelSandbox(	CODE
LOW	packages/@agent-browser/sandbox/src/vercel.ts	195	export async function createAgentBrowserSandbox(	CODE
LOW	packages/@agent-browser/sandbox/src/vercel.ts	327	export async function createAgentBrowserSnapshot(	CODE
LOW	packages/@agent-browser/sandbox/src/vercel.ts	408	async function loadVercelSandboxConstructor(): Promise<VercelSandboxConstructor> {	CODE
LOW	packages/@agent-browser/eve/extension/lib/sandbox.ts	121	export function agentBrowserRevalidationKey(options: AgentBrowserInstallOptions = {}): string {	CODE
LOW	packages/@agent-browser/eve/extension/lib/sandbox.ts	197	function buildLinuxSystemDependenciesCommand(): string {	CODE
LOW	packages/dashboard/src/lib/dashboard-routes.ts	46	export function initializeDashboardAccessToken(): void {	CODE

Modern AI Meta-Vocabulary2 hits · 5 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	README.md	1989	[Browserbase](https://browserbase.com) provides remote browser infrastructure to make deployment of agentic browsing age	CODE
MEDIUM	packages/@agent-browser/eve/README.md	129	Cookie, storage, and saved-auth-state commands are intentionally not exposed as tools — they make credential material vi	CODE

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…lls/technical-writer/references/editorial-standards.md	3	Apply these standards to the passage and its surrounding section. They are editing criteria, not proof of authorship. A	CODE

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
LOW	.github/workflows/release.yml	61	# Check if GitHub release exists; it may be missing if a prior run	COMMENT

Deep Nesting1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	evals/webmcp-context.py	15		CODE

Overly Generic Function Names1 hit · 1 pts

Severity	File	Line	Snippet	Context
LOW	cli/src/native/react/installHook.js	27	(()=>{var e={4659:(e,t,n)=>{"use strict";var r=n(8715),o=n(1147),s=Object.assign,i=o.__CLIENT_INTERNALS_DO_NOT_USE_OR_WA	CODE

vercel-labs/agent-browser

Open-Source Code Quality, Security and Technical Debt Review