Repository Analysis

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

1.5 Likely human-written View on GitHub
1.5
Adjusted Score
1.5
Raw Score
100%
Time Factor
2026-05-29
Last Push
17,333
Stars
Go
Language
435,299
Lines of Code
1028
Files
503
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 0HIGH 5MEDIUM 109LOW 389

Pattern Findings

503 matches across 9 categories. Click a row to expand file-level details.

Decorative Section Separators102 hits · 255 pts
SeverityFileLineSnippet
MEDIUMfrontend/src/features/resources/resources-constants.ts9// ── Upload limits (mirror backend's `pkg/resources/resources.go`) ───────────
MEDIUM…ntend/src/features/flows/files/flow-files-constants.ts31// ── Upload limits (mirror backend's `pkg/flowfiles/files.go`) ──────────────
MEDIUM…omponents/shared/file-manager/file-manager-actions.tsx51// ── Bulk-action helpers ─────────────────────────────────────────────────────
MEDIUMfrontend/src/lib/axios.ts10// ── shared API protocol types ────────────────────────────────────────────────
MEDIUMfrontend/src/lib/axios.ts162// ── typed wrapper ────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2161 // ── atomicity / fail-safe: files that must still exist ────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2171// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2173// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go44// ── sanitizeFlowFileName ─────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go109// ── directory helpers ─────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go124// ── resolveCachedPath ─────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go158// ── listDirEntries ────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go221// ── listFlowFiles ─────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go311// ── localEntryExists ─────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go328// ── isWithinDir ───────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go356// ── extractTar ────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go447// ── zipDirectory ─────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go496// ── primaryContainerName ─────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go502// ── sorting ───────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go519// ── pure helpers ─────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go655// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go657// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go793// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go795// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go943// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go945// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1108// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1110// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1238// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1240// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1653// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1655// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1688 // ── single-path via ?path= (existing behaviour) ───────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1737 // ── single-path: access control ──────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1755 // ── single-path: invalid input ────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1789 // ── paths[] parameter ─────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1910 // ── Docker exec: batch optimisation ──────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1980 // ── access control ────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go1993 // ── input validation: batch edge cases ───────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2032 // ── Docker error handling ─────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2106 // ── success assertions ────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2149 // ── exec count assertions (checked regardless of status) ──────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2191 // ── single-path: existing behaviour (backward compatibility) ──────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2236 // ── access control ────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2252 // ── single-path: invalid input ────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2285 // ── paths[] parameter ─────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2415 // ── paths[]: invalid input ─────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2523// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2525// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go2547 // ── single-path: existing behaviour (backward compatibility) ──────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3006// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3008// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3026 // ── single-path: existing behaviour (backward compatibility) ──────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3073 // ── access control ────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3107 // ── infrastructure errors ─────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3146 // ── paths[] parameter ─────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3384// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3386// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3601// ─────────────────────────────────────────────────────────────────────────────
MEDIUMbackend/pkg/server/services/flow_files_test.go3603// ─────────────────────────────────────────────────────────────────────────────
42 more matches not shown…
Hyper-Verbose Identifiers207 hits · 155 pts
SeverityFileLineSnippet
LOW…features/knowledges/use-knowledge-detail-navigation.ts14export function useKnowledgeDetailNavigation(currentId: null | string | undefined) {
LOW…tend/src/features/knowledges/knowledge-form-layout.tsx27export function KnowledgeFormLayoutDesktop({ control, isNew, isSaving, knowledge }: KnowledgeFormLayoutProps) {
LOW…tend/src/features/knowledges/knowledge-form-layout.tsx74export function KnowledgeFormLayoutMobile({ control, isNew, isSaving, knowledge }: KnowledgeFormLayoutProps) {
LOW…c/features/templates/use-template-detail-navigation.ts16export function useTemplateDetailNavigation(currentId: null | string | undefined) {
LOW…/flows/vector-stores/flow-vector-store-action-icon.tsx22function FlowVectorStoreActionIcon({ action, className, tooltip = action }: FlowVectorStoreActionIconProps) {
LOW…eatures/flows/files/use-flow-files-attach-resources.ts35export function useFlowFilesAttachResources({
LOW…res/flows/files/flow-files-attach-resources-dialog.tsx49export function FlowFilesAttachResourcesDialog({
LOW…res/flows/files/flow-files-attach-resources-dialog.tsx79function FlowFilesAttachResourcesDialogBody({
LOW…src/features/flows/files/flow-files-promote-dialog.tsx137function FlowFilesPromoteDialogForm({ files, flowId, onClose }: FlowFilesPromoteDialogFormProps) {
LOWfrontend/src/components/ui/input-group.tsx134function InputGroupTextareaAutosize({ className, ...props }: React.ComponentProps<typeof TextareaAutosize>) {
LOW…/shared/file-manager/file-manager-bulk-actions-bar.tsx53export function FileManagerBulkActionsBar({
LOW…nents/shared/file-manager/use-file-manager-keyboard.ts39export function useFileManagerKeyboardNavigation({
LOW…/shared/file-manager/file-manager-highlighted-name.tsx11export function FileManagerHighlightedName({ className, name, query }: FileManagerHighlightedNameProps) {
LOWfrontend/src/graphql/types.ts2058export function useProvidersSuspenseQuery(
LOWfrontend/src/graphql/types.ts2061export function useProvidersSuspenseQuery(
LOWfrontend/src/graphql/types.ts2066export function useProvidersSuspenseQuery(
LOWfrontend/src/graphql/types.ts2238export function useSettingsProvidersQuery(
LOWfrontend/src/graphql/types.ts2247export function useSettingsProvidersLazyQuery(
LOWfrontend/src/graphql/types.ts2257export function useSettingsProvidersSuspenseQuery(
LOWfrontend/src/graphql/types.ts2260export function useSettingsProvidersSuspenseQuery(
LOWfrontend/src/graphql/types.ts2265export function useSettingsProvidersSuspenseQuery(
LOWfrontend/src/graphql/types.ts2472export function useSettingsPromptsLazyQuery(
LOWfrontend/src/graphql/types.ts2482export function useSettingsPromptsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2485export function useSettingsPromptsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2490export function useSettingsPromptsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2687export function useFlowFilesSuspenseQuery(
LOWfrontend/src/graphql/types.ts2690export function useFlowFilesSuspenseQuery(
LOWfrontend/src/graphql/types.ts2695export function useFlowFilesSuspenseQuery(
LOWfrontend/src/graphql/types.ts2746export function useResourcesSuspenseQuery(
LOWfrontend/src/graphql/types.ts2749export function useResourcesSuspenseQuery(
LOWfrontend/src/graphql/types.ts2754export function useResourcesSuspenseQuery(
LOWfrontend/src/graphql/types.ts2805export function useAssistantsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2808export function useAssistantsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2813export function useAssistantsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2858export function useAssistantLogsLazyQuery(
LOWfrontend/src/graphql/types.ts2868export function useAssistantLogsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2871export function useAssistantLogsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2876export function useAssistantLogsSuspenseQuery(
LOWfrontend/src/graphql/types.ts2934export function useFlowReportSuspenseQuery(
LOWfrontend/src/graphql/types.ts2937export function useFlowReportSuspenseQuery(
LOWfrontend/src/graphql/types.ts2942export function useFlowReportSuspenseQuery(
LOWfrontend/src/graphql/types.ts2987export function useUsageStatsTotalLazyQuery(
LOWfrontend/src/graphql/types.ts2997export function useUsageStatsTotalSuspenseQuery(
LOWfrontend/src/graphql/types.ts3000export function useUsageStatsTotalSuspenseQuery(
LOWfrontend/src/graphql/types.ts3005export function useUsageStatsTotalSuspenseQuery(
LOWfrontend/src/graphql/types.ts3048export function useUsageStatsByPeriodQuery(
LOWfrontend/src/graphql/types.ts3058export function useUsageStatsByPeriodLazyQuery(
LOWfrontend/src/graphql/types.ts3068export function useUsageStatsByPeriodSuspenseQuery(
LOWfrontend/src/graphql/types.ts3071export function useUsageStatsByPeriodSuspenseQuery(
LOWfrontend/src/graphql/types.ts3076export function useUsageStatsByPeriodSuspenseQuery(
LOWfrontend/src/graphql/types.ts3118export function useUsageStatsByProviderQuery(
LOWfrontend/src/graphql/types.ts3127export function useUsageStatsByProviderLazyQuery(
LOWfrontend/src/graphql/types.ts3137export function useUsageStatsByProviderSuspenseQuery(
LOWfrontend/src/graphql/types.ts3143export function useUsageStatsByProviderSuspenseQuery(
LOWfrontend/src/graphql/types.ts3148export function useUsageStatsByProviderSuspenseQuery(
LOWfrontend/src/graphql/types.ts3190export function useUsageStatsByModelQuery(
LOWfrontend/src/graphql/types.ts3199export function useUsageStatsByModelLazyQuery(
LOWfrontend/src/graphql/types.ts3209export function useUsageStatsByModelSuspenseQuery(
LOWfrontend/src/graphql/types.ts3212export function useUsageStatsByModelSuspenseQuery(
LOWfrontend/src/graphql/types.ts3217export function useUsageStatsByModelSuspenseQuery(
147 more matches not shown…
Over-Commented Block127 hits · 126 pts
SeverityFileLineSnippet
LOWREADME.md701# BEDROCK_SECRET_ACCESS_KEY=your_aws_secret_key
LOWfrontend/types/vitest.d.ts1// Augment Vitest's `expect` with @testing-library/jest-dom matchers
LOWfrontend/src/providers/knowledges-provider.tsx81 // Re-mounting the provider on return to /knowledges should refresh.
LOWfrontend/src/features/knowledges/knowledge-form.tsx201 // `onTouched` validates a field on its first blur and on every change
LOWfrontend/src/features/knowledges/knowledge-form.tsx261
LOWfrontend/src/components/ui/data-table.tsx261 // negligible, but the explicit pass keeps the data flow obvious and
LOWfrontend/src/components/ui/data-table.tsx381 // dropping the next keystroke. `useDeferredValue` lets React surface the
LOWfrontend/src/components/ui/data-table.test.tsx621 const option = await screen.findByRole('option', { name: 'All' });
LOWfrontend/src/components/shared/markdown-editor.tsx121 // normalizations as user edits — that would falsely flip RHF's
LOWfrontend/src/components/shared/markdown-editor.tsx221 // user keystroke to also re-emit the round-trip normalization.
LOW…s/shared/detail-navigation/detail-navigation-sheet.tsx81
LOW…s/shared/detail-navigation/detail-navigation-sheet.tsx141 setFocusedId(desiredFocusId);
LOW…red/detail-navigation/detail-navigation-sheet.test.tsx381 // to click the option to interact with it after typing.
LOW…c/components/shared/file-manager/file-manager-utils.ts861 next.delete(path);
LOW…components/shared/file-manager/use-file-manager-dnd.ts361 }
LOW…rc/components/shared/file-manager/file-manager-row.tsx381 onDrop={dnd?.onDrop}
LOW…kend/cmd/installer/wizard/terminal/vt/terminal_test.go1021 want: []string{" BC "},
LOW…kend/cmd/installer/wizard/terminal/vt/terminal_test.go1041 // w: 8, h: 1,
LOW…kend/cmd/installer/wizard/terminal/vt/terminal_test.go1141 input: []string{
LOWbackend/cmd/installer/state/example_test.go81 // --- Step 2: API Configuration ---
LOWbackend/cmd/installer/state/example_test.go181 fmt.Printf("Session 2 - Final Step: %s, Changes: %d\n",
LOWbackend/cmd/installer/loader/example_test.go61
LOWbackend/docs/chain_ast.md161// Create a chain section
LOWbackend/pkg/database/querier.go241 // embedding must be formatted as a PostgreSQL vector literal: '[f1,f2,...]'
LOWbackend/pkg/database/knowledge/knowledge.go341
LOWbackend/pkg/cast/chain_ast.go901 return totalSize
LOWbackend/pkg/providers/helpers.go41)
LOWbackend/pkg/providers/qwen/config.yml1# Qwen (Alibaba Cloud DashScope) agent configuration.
LOWbackend/pkg/providers/deepseek/config.yml1# DeepSeek V4 agent configuration.
LOWbackend/pkg/providers/glm/glm.go81 if err != nil {
LOWbackend/pkg/providers/glm/config.yml1# Z.AI GLM agent configuration.
LOWbackend/pkg/providers/kimi/config.yml1# Kimi (Moonshot) agent configuration.
LOWbackend/pkg/server/router.go61}
LOWbackend/pkg/server/models/resources.go41type MkdirResourceRequest struct {
LOWbackend/pkg/server/models/resources.go61 Sources []string `json:"sources"`
LOWbackend/pkg/server/models/flow_files.go61//
LOWbackend/pkg/server/services/screenshots.go221 response.Success(c, http.StatusOK, resp)
LOWbackend/pkg/server/services/screenshots.go281 } else {
LOWbackend/pkg/server/services/anonymizer.go21
LOWbackend/pkg/server/services/users.go101 logger.FromContext(c).WithError(err).Errorf("error validating user data '%s'", resp.Hash)
LOWbackend/pkg/server/services/assistants.go161// GetFlowAssistant is a function to return flow assistant by id
LOWbackend/pkg/server/services/assistants.go501 response.Success(c, http.StatusOK, assistant)
LOWbackend/pkg/server/services/tasks.go41 db *gorm.DB
LOWbackend/pkg/server/services/tasks.go141// @Summary Retrieve flow task by id
LOWbackend/pkg/server/services/tasks.go201 } else {
LOWbackend/pkg/server/services/graphql.go121 }
LOWbackend/pkg/server/services/toolcalls.go221
LOWbackend/pkg/server/services/auth.go221
LOWbackend/pkg/server/services/prompts.go41func NewPromptService(db *gorm.DB) *PromptService {
LOWbackend/pkg/server/services/prompts.go121// GetPrompt is a function to return prompt by type
LOWbackend/pkg/server/services/prompts.go261// @Accept json
LOWbackend/pkg/server/services/assistantlogs.go41 db *gorm.DB
LOWbackend/pkg/server/services/containers.go221}
LOWbackend/pkg/server/services/flows.go61 db: db,
LOWbackend/pkg/server/services/flows.go141 }
LOWbackend/pkg/server/services/flows.go381 response.Success(c, http.StatusCreated, flow)
LOWbackend/pkg/server/services/resources.go61}
LOWbackend/pkg/server/services/resources.go221
LOWbackend/pkg/server/services/resources.go541//
LOWbackend/pkg/server/services/resources.go1181 return rec, nil
67 more matches not shown…
Verbosity Indicators44 hits · 79 pts
SeverityFileLineSnippet
LOW…ponents/shared/file-manager/file-manager-utils.test.ts947 // Step 1: single click on 'b' → anchor = 'b'
LOW…ponents/shared/file-manager/file-manager-utils.test.ts958 // Step 2: shift-click on 'd' → range b..d, anchor still 'b'
LOW…ponents/shared/file-manager/file-manager-utils.test.ts970 // Step 3: shift-click on 'e' → range b..e, anchor still 'b'
LOW…ponents/shared/file-manager/file-manager-utils.test.ts1281 // Step 1: single-click `f1` → sel = whole f1 branch, anchor = f1.
LOW…ponents/shared/file-manager/file-manager-utils.test.ts1294 // Step 2: shift-click `f2` → range f1..f2 expands BOTH folders.
LOW…ponents/shared/file-manager/file-manager-utils.test.ts1308 // Step 3: shift-click `f3` → anchor still f1, range now covers all 3.
LOWbackend/cmd/installer/state/example_test.go28 // Step 1: Initialize state management
LOWbackend/cmd/installer/state/example_test.go34 // Step 2: Multi-step configuration process
LOWbackend/cmd/installer/state/example_test.go46 // Step 3: Continue with API configuration
LOWbackend/cmd/installer/state/example_test.go61 // Step 4: User can choose to commit or reset
LOWbackend/cmd/installer/loader/example_test.go24 // Step 1: Load existing .env file
LOWbackend/cmd/installer/loader/example_test.go30 // Step 2: Display current values and defaults (only variables from file)
LOWbackend/cmd/installer/loader/example_test.go51 // Step 3: User modifies values
LOWbackend/cmd/installer/loader/example_test.go56 // Step 4: Save changes (creates backup automatically)
LOWbackend/pkg/tools/testdata/sploitus_result_nginx.json50 "source": "## https://sploitus.com/exploit?id=PACKETSTORM:215599\nphpIPAM 1.4 LFI to RCE Exploit\n \n
LOWbackend/pkg/cast/chain_ast_test.go2585 // Step 1: Create a chain with Gemini-style tool calls
LOWbackend/pkg/cast/chain_ast_test.go2647 // Step 2: Parse the Gemini chain
LOWbackend/pkg/cast/chain_ast_test.go2656 // Step 3: Normalize to Anthropic format
LOWbackend/pkg/cast/chain_ast_test.go2661 // Step 4: Verify all tool call IDs are now in Anthropic format
LOWbackend/pkg/cast/chain_ast_test.go2711 // Step 5: Verify the chain can be parsed again without errors
LOWbackend/pkg/cast/chain_ast_test.go2937 // Step 1: Create chain with Anthropic-specific data
LOWbackend/pkg/cast/chain_ast_test.go2973 // Step 2: Parse the chain
LOWbackend/pkg/cast/chain_ast_test.go2977 // Step 3: Normalize to Gemini format
LOWbackend/pkg/cast/chain_ast_test.go2982 // Step 4: Clear reasoning signatures
LOWbackend/pkg/cast/chain_ast_test.go2986 // Step 5: Verify all changes
LOWbackend/pkg/cast/chain_ast_test.go3012 // Step 6: Verify chain is still valid and parseable
LOWbackend/pkg/providers/provider/litellm_test.go529 // Step 1: Load models from HTTP with LiteLLM prefix
LOWbackend/pkg/providers/provider/litellm_test.go548 // Step 2: Simulate Model() call - should return without prefix
LOWbackend/pkg/providers/provider/litellm_test.go554 // Step 3: Simulate ModelWithPrefix() call - should return with prefix
LOWbackend/pkg/providers/provider/litellm_test.go560 // Step 4: Verify round-trip consistency
LOWbackend/pkg/providers/provider/litellm_test.go566 // Step 5: Verify metadata preservation
LOWbackend/pkg/providers/provider/agents.go121 // Step 0: Check if template is already in cache
LOWbackend/pkg/providers/provider/agents.go132 // Step 1: Collect 5 sample tool call IDs in parallel
LOWbackend/pkg/graph/schema.resolvers.go1905 // Step 1: Get flows for the period
LOWbackend/pkg/graph/schema.resolvers.go1941 // Step 2: Build stats for each flow using analytics functions
LOWbackend/pkg/server/services/api_tokens_test.go732 // Step 1: Create token
LOWbackend/pkg/server/services/api_tokens_test.go753 // Step 2: Validate token works
LOWbackend/pkg/server/services/api_tokens_test.go758 // Step 3: List tokens (should see it)
LOWbackend/pkg/server/services/api_tokens_test.go772 // Step 4: Update token name
LOWbackend/pkg/server/services/api_tokens_test.go781 // Step 5: Revoke token
LOWbackend/pkg/server/services/api_tokens_test.go790 // Step 6: Verify revoked status in cache
LOWbackend/pkg/server/services/api_tokens_test.go797 // Step 7: Delete token
LOWbackend/pkg/server/services/api_tokens_test.go804 // Step 8: Verify soft delete
LOWbackend/pkg/server/services/api_tokens_test.go810 // Step 9: Token should not be found after deletion
Magic Placeholder Names5 hits · 22 pts
SeverityFileLineSnippet
HIGHREADME.md2964LLM_SERVER_KEY=your_api_key
HIGHbackend/pkg/observability/langfuse/api/README.md101 option.WithToken("<YOUR_API_KEY>"),
HIGHbackend/pkg/observability/langfuse/api/README.md101 option.WithToken("<YOUR_API_KEY>"),
HIGHbackend/pkg/observability/langfuse/api/README.md112 option.WithToken("<YOUR_API_KEY>"),
HIGHbackend/pkg/observability/langfuse/api/README.md112 option.WithToken("<YOUR_API_KEY>"),
AI Slop Vocabulary6 hits · 15 pts
SeverityFileLineSnippet
MEDIUM…ponents/shared/file-manager/file-manager-utils.test.ts107 // instead of arithmetic keeps the test robust against month-length
MEDIUMbackend/pkg/tools/testdata/sploitus_result_nginx.json40 "source": "## https://sploitus.com/exploit?id=PACKETSTORM:215609\n==========================================
MEDIUMbackend/pkg/tools/testdata/sploitus_result_nginx.json80 "source": "## https://sploitus.com/exploit?id=8D7C8EA8-FA97-516C-805B-4D34248039FE\n\ud83d\udd25 LFI-Destroy
MEDIUM…end/pkg/tools/testdata/ddg_result_docker_security.html315 <a class="result__snippet" href="https://betterstack.com/community/guides/scaling-docker/docker-
MEDIUM…end/pkg/tools/testdata/ddg_result_docker_security.html354 <a class="result__snippet" href="https://www.geeksforgeeks.org/devops/docker-security-best-pract
MEDIUMbackend/pkg/providers/bedrock/models.yml1# Amazon Nova Series - Advanced multimodal models with state-of-the-art performance
Fake / Example Data10 hits · 10 pts
SeverityFileLineSnippet
LOWbackend/pkg/providers/tester/runner_test.go145 {Key: "Return JSON", Response: `{"name": "John Doe", "age": 30, "city": "New York"}`},
LOWbackend/pkg/providers/tester/testdata/json_test.go22 name: "John Doe"
LOWbackend/pkg/providers/tester/testdata/json_test.go55 validJSON := `{"name": "John Doe", "age": 30, "city": "New York"}`
LOWbackend/pkg/providers/tester/testdata/json_test.go62 invalidJSON := `{"name": "John Doe"}`
LOWbackend/pkg/providers/tester/testdata/tests.yml54 name='John Doe', age=30, city='New York';
LOWbackend/pkg/providers/tester/testdata/tests.yml57 name: "John Doe"
LOWbackend/pkg/providers/tester/testdata/tests.yml85 content: "Generate a JSON response for a user profile with username='user123', email='user@example.com', active=tr
LOWbackend/pkg/providers/tester/testdata/tests.yml88 email: "user@example.com"
LOWbackend/pkg/providers/tester/testdata/tests.yml358 content: "Return a JSON with a person's information: name='Jane Doe', age=25, city='Boston'"
LOWbackend/pkg/providers/tester/testdata/tests.yml360 name: "Jane Doe"
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippet
MEDIUMbackend/cmd/installer/main.go155# This file contains environment variables for PentAGI configuration.
Redundant / Tautological Comments1 hit · 2 pts
SeverityFileLineSnippet
LOWbackend/pkg/tools/testdata/sploitus_result_nginx.json30 "source": "## https://sploitus.com/exploit?id=AC4871CE-CE60-5709-98A9-551F3A9DB7A2\n# Ivanti EPMM pre-auth R