Fully autonomous AI Agents system capable of performing complex penetration testing tasks
503 matches across 9 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | frontend/src/features/resources/resources-constants.ts | 9 | // ── Upload limits (mirror backend's `pkg/resources/resources.go`) ─────────── |
| MEDIUM | …ntend/src/features/flows/files/flow-files-constants.ts | 31 | // ── Upload limits (mirror backend's `pkg/flowfiles/files.go`) ────────────── |
| MEDIUM | …omponents/shared/file-manager/file-manager-actions.tsx | 51 | // ── Bulk-action helpers ───────────────────────────────────────────────────── |
| MEDIUM | frontend/src/lib/axios.ts | 10 | // ── shared API protocol types ──────────────────────────────────────────────── |
| MEDIUM | frontend/src/lib/axios.ts | 162 | // ── typed wrapper ──────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2161 | // ── atomicity / fail-safe: files that must still exist ──────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2171 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2173 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 44 | // ── sanitizeFlowFileName ───────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 109 | // ── directory helpers ───────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 124 | // ── resolveCachedPath ───────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 158 | // ── listDirEntries ──────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 221 | // ── listFlowFiles ───────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 311 | // ── localEntryExists ───────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 328 | // ── isWithinDir ─────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 356 | // ── extractTar ──────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 447 | // ── zipDirectory ───────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 496 | // ── primaryContainerName ───────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 502 | // ── sorting ─────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 519 | // ── pure helpers ───────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 655 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 657 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 793 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 795 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 943 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 945 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1108 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1110 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1238 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1240 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1653 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1655 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1688 | // ── single-path via ?path= (existing behaviour) ─────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1737 | // ── single-path: access control ────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1755 | // ── single-path: invalid input ──────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1789 | // ── paths[] parameter ───────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1910 | // ── Docker exec: batch optimisation ────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1980 | // ── access control ──────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 1993 | // ── input validation: batch edge cases ─────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2032 | // ── Docker error handling ───────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2106 | // ── success assertions ──────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2149 | // ── exec count assertions (checked regardless of status) ────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2191 | // ── single-path: existing behaviour (backward compatibility) ────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2236 | // ── access control ──────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2252 | // ── single-path: invalid input ──────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2285 | // ── paths[] parameter ───────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2415 | // ── paths[]: invalid input ───────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2523 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2525 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 2547 | // ── single-path: existing behaviour (backward compatibility) ────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3006 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3008 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3026 | // ── single-path: existing behaviour (backward compatibility) ────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3073 | // ── access control ──────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3107 | // ── infrastructure errors ───────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3146 | // ── paths[] parameter ───────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3384 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3386 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3601 | // ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | backend/pkg/server/services/flow_files_test.go | 3603 | // ───────────────────────────────────────────────────────────────────────────── |
| 42 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …features/knowledges/use-knowledge-detail-navigation.ts | 14 | export function useKnowledgeDetailNavigation(currentId: null | string | undefined) { |
| LOW | …tend/src/features/knowledges/knowledge-form-layout.tsx | 27 | export function KnowledgeFormLayoutDesktop({ control, isNew, isSaving, knowledge }: KnowledgeFormLayoutProps) { |
| LOW | …tend/src/features/knowledges/knowledge-form-layout.tsx | 74 | export function KnowledgeFormLayoutMobile({ control, isNew, isSaving, knowledge }: KnowledgeFormLayoutProps) { |
| LOW | …c/features/templates/use-template-detail-navigation.ts | 16 | export function useTemplateDetailNavigation(currentId: null | string | undefined) { |
| LOW | …/flows/vector-stores/flow-vector-store-action-icon.tsx | 22 | function FlowVectorStoreActionIcon({ action, className, tooltip = action }: FlowVectorStoreActionIconProps) { |
| LOW | …eatures/flows/files/use-flow-files-attach-resources.ts | 35 | export function useFlowFilesAttachResources({ |
| LOW | …res/flows/files/flow-files-attach-resources-dialog.tsx | 49 | export function FlowFilesAttachResourcesDialog({ |
| LOW | …res/flows/files/flow-files-attach-resources-dialog.tsx | 79 | function FlowFilesAttachResourcesDialogBody({ |
| LOW | …src/features/flows/files/flow-files-promote-dialog.tsx | 137 | function FlowFilesPromoteDialogForm({ files, flowId, onClose }: FlowFilesPromoteDialogFormProps) { |
| LOW | frontend/src/components/ui/input-group.tsx | 134 | function InputGroupTextareaAutosize({ className, ...props }: React.ComponentProps<typeof TextareaAutosize>) { |
| LOW | …/shared/file-manager/file-manager-bulk-actions-bar.tsx | 53 | export function FileManagerBulkActionsBar({ |
| LOW | …nents/shared/file-manager/use-file-manager-keyboard.ts | 39 | export function useFileManagerKeyboardNavigation({ |
| LOW | …/shared/file-manager/file-manager-highlighted-name.tsx | 11 | export function FileManagerHighlightedName({ className, name, query }: FileManagerHighlightedNameProps) { |
| LOW | frontend/src/graphql/types.ts | 2058 | export function useProvidersSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2061 | export function useProvidersSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2066 | export function useProvidersSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2238 | export function useSettingsProvidersQuery( |
| LOW | frontend/src/graphql/types.ts | 2247 | export function useSettingsProvidersLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 2257 | export function useSettingsProvidersSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2260 | export function useSettingsProvidersSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2265 | export function useSettingsProvidersSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2472 | export function useSettingsPromptsLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 2482 | export function useSettingsPromptsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2485 | export function useSettingsPromptsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2490 | export function useSettingsPromptsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2687 | export function useFlowFilesSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2690 | export function useFlowFilesSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2695 | export function useFlowFilesSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2746 | export function useResourcesSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2749 | export function useResourcesSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2754 | export function useResourcesSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2805 | export function useAssistantsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2808 | export function useAssistantsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2813 | export function useAssistantsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2858 | export function useAssistantLogsLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 2868 | export function useAssistantLogsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2871 | export function useAssistantLogsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2876 | export function useAssistantLogsSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2934 | export function useFlowReportSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2937 | export function useFlowReportSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2942 | export function useFlowReportSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 2987 | export function useUsageStatsTotalLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 2997 | export function useUsageStatsTotalSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3000 | export function useUsageStatsTotalSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3005 | export function useUsageStatsTotalSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3048 | export function useUsageStatsByPeriodQuery( |
| LOW | frontend/src/graphql/types.ts | 3058 | export function useUsageStatsByPeriodLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 3068 | export function useUsageStatsByPeriodSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3071 | export function useUsageStatsByPeriodSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3076 | export function useUsageStatsByPeriodSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3118 | export function useUsageStatsByProviderQuery( |
| LOW | frontend/src/graphql/types.ts | 3127 | export function useUsageStatsByProviderLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 3137 | export function useUsageStatsByProviderSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3143 | export function useUsageStatsByProviderSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3148 | export function useUsageStatsByProviderSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3190 | export function useUsageStatsByModelQuery( |
| LOW | frontend/src/graphql/types.ts | 3199 | export function useUsageStatsByModelLazyQuery( |
| LOW | frontend/src/graphql/types.ts | 3209 | export function useUsageStatsByModelSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3212 | export function useUsageStatsByModelSuspenseQuery( |
| LOW | frontend/src/graphql/types.ts | 3217 | export function useUsageStatsByModelSuspenseQuery( |
| 147 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | README.md | 701 | # BEDROCK_SECRET_ACCESS_KEY=your_aws_secret_key |
| LOW | frontend/types/vitest.d.ts | 1 | // Augment Vitest's `expect` with @testing-library/jest-dom matchers |
| LOW | frontend/src/providers/knowledges-provider.tsx | 81 | // Re-mounting the provider on return to /knowledges should refresh. |
| LOW | frontend/src/features/knowledges/knowledge-form.tsx | 201 | // `onTouched` validates a field on its first blur and on every change |
| LOW | frontend/src/features/knowledges/knowledge-form.tsx | 261 | |
| LOW | frontend/src/components/ui/data-table.tsx | 261 | // negligible, but the explicit pass keeps the data flow obvious and |
| LOW | frontend/src/components/ui/data-table.tsx | 381 | // dropping the next keystroke. `useDeferredValue` lets React surface the |
| LOW | frontend/src/components/ui/data-table.test.tsx | 621 | const option = await screen.findByRole('option', { name: 'All' }); |
| LOW | frontend/src/components/shared/markdown-editor.tsx | 121 | // normalizations as user edits — that would falsely flip RHF's |
| LOW | frontend/src/components/shared/markdown-editor.tsx | 221 | // user keystroke to also re-emit the round-trip normalization. |
| LOW | …s/shared/detail-navigation/detail-navigation-sheet.tsx | 81 | |
| LOW | …s/shared/detail-navigation/detail-navigation-sheet.tsx | 141 | setFocusedId(desiredFocusId); |
| LOW | …red/detail-navigation/detail-navigation-sheet.test.tsx | 381 | // to click the option to interact with it after typing. |
| LOW | …c/components/shared/file-manager/file-manager-utils.ts | 861 | next.delete(path); |
| LOW | …components/shared/file-manager/use-file-manager-dnd.ts | 361 | } |
| LOW | …rc/components/shared/file-manager/file-manager-row.tsx | 381 | onDrop={dnd?.onDrop} |
| LOW | …kend/cmd/installer/wizard/terminal/vt/terminal_test.go | 1021 | want: []string{" BC "}, |
| LOW | …kend/cmd/installer/wizard/terminal/vt/terminal_test.go | 1041 | // w: 8, h: 1, |
| LOW | …kend/cmd/installer/wizard/terminal/vt/terminal_test.go | 1141 | input: []string{ |
| LOW | backend/cmd/installer/state/example_test.go | 81 | // --- Step 2: API Configuration --- |
| LOW | backend/cmd/installer/state/example_test.go | 181 | fmt.Printf("Session 2 - Final Step: %s, Changes: %d\n", |
| LOW | backend/cmd/installer/loader/example_test.go | 61 | |
| LOW | backend/docs/chain_ast.md | 161 | // Create a chain section |
| LOW | backend/pkg/database/querier.go | 241 | // embedding must be formatted as a PostgreSQL vector literal: '[f1,f2,...]' |
| LOW | backend/pkg/database/knowledge/knowledge.go | 341 | |
| LOW | backend/pkg/cast/chain_ast.go | 901 | return totalSize |
| LOW | backend/pkg/providers/helpers.go | 41 | ) |
| LOW | backend/pkg/providers/qwen/config.yml | 1 | # Qwen (Alibaba Cloud DashScope) agent configuration. |
| LOW | backend/pkg/providers/deepseek/config.yml | 1 | # DeepSeek V4 agent configuration. |
| LOW | backend/pkg/providers/glm/glm.go | 81 | if err != nil { |
| LOW | backend/pkg/providers/glm/config.yml | 1 | # Z.AI GLM agent configuration. |
| LOW | backend/pkg/providers/kimi/config.yml | 1 | # Kimi (Moonshot) agent configuration. |
| LOW | backend/pkg/server/router.go | 61 | } |
| LOW | backend/pkg/server/models/resources.go | 41 | type MkdirResourceRequest struct { |
| LOW | backend/pkg/server/models/resources.go | 61 | Sources []string `json:"sources"` |
| LOW | backend/pkg/server/models/flow_files.go | 61 | // |
| LOW | backend/pkg/server/services/screenshots.go | 221 | response.Success(c, http.StatusOK, resp) |
| LOW | backend/pkg/server/services/screenshots.go | 281 | } else { |
| LOW | backend/pkg/server/services/anonymizer.go | 21 | |
| LOW | backend/pkg/server/services/users.go | 101 | logger.FromContext(c).WithError(err).Errorf("error validating user data '%s'", resp.Hash) |
| LOW | backend/pkg/server/services/assistants.go | 161 | // GetFlowAssistant is a function to return flow assistant by id |
| LOW | backend/pkg/server/services/assistants.go | 501 | response.Success(c, http.StatusOK, assistant) |
| LOW | backend/pkg/server/services/tasks.go | 41 | db *gorm.DB |
| LOW | backend/pkg/server/services/tasks.go | 141 | // @Summary Retrieve flow task by id |
| LOW | backend/pkg/server/services/tasks.go | 201 | } else { |
| LOW | backend/pkg/server/services/graphql.go | 121 | } |
| LOW | backend/pkg/server/services/toolcalls.go | 221 | |
| LOW | backend/pkg/server/services/auth.go | 221 | |
| LOW | backend/pkg/server/services/prompts.go | 41 | func NewPromptService(db *gorm.DB) *PromptService { |
| LOW | backend/pkg/server/services/prompts.go | 121 | // GetPrompt is a function to return prompt by type |
| LOW | backend/pkg/server/services/prompts.go | 261 | // @Accept json |
| LOW | backend/pkg/server/services/assistantlogs.go | 41 | db *gorm.DB |
| LOW | backend/pkg/server/services/containers.go | 221 | } |
| LOW | backend/pkg/server/services/flows.go | 61 | db: db, |
| LOW | backend/pkg/server/services/flows.go | 141 | } |
| LOW | backend/pkg/server/services/flows.go | 381 | response.Success(c, http.StatusCreated, flow) |
| LOW | backend/pkg/server/services/resources.go | 61 | } |
| LOW | backend/pkg/server/services/resources.go | 221 | |
| LOW | backend/pkg/server/services/resources.go | 541 | // |
| LOW | backend/pkg/server/services/resources.go | 1181 | return rec, nil |
| 67 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …ponents/shared/file-manager/file-manager-utils.test.ts | 947 | // Step 1: single click on 'b' → anchor = 'b' |
| LOW | …ponents/shared/file-manager/file-manager-utils.test.ts | 958 | // Step 2: shift-click on 'd' → range b..d, anchor still 'b' |
| LOW | …ponents/shared/file-manager/file-manager-utils.test.ts | 970 | // Step 3: shift-click on 'e' → range b..e, anchor still 'b' |
| LOW | …ponents/shared/file-manager/file-manager-utils.test.ts | 1281 | // Step 1: single-click `f1` → sel = whole f1 branch, anchor = f1. |
| LOW | …ponents/shared/file-manager/file-manager-utils.test.ts | 1294 | // Step 2: shift-click `f2` → range f1..f2 expands BOTH folders. |
| LOW | …ponents/shared/file-manager/file-manager-utils.test.ts | 1308 | // Step 3: shift-click `f3` → anchor still f1, range now covers all 3. |
| LOW | backend/cmd/installer/state/example_test.go | 28 | // Step 1: Initialize state management |
| LOW | backend/cmd/installer/state/example_test.go | 34 | // Step 2: Multi-step configuration process |
| LOW | backend/cmd/installer/state/example_test.go | 46 | // Step 3: Continue with API configuration |
| LOW | backend/cmd/installer/state/example_test.go | 61 | // Step 4: User can choose to commit or reset |
| LOW | backend/cmd/installer/loader/example_test.go | 24 | // Step 1: Load existing .env file |
| LOW | backend/cmd/installer/loader/example_test.go | 30 | // Step 2: Display current values and defaults (only variables from file) |
| LOW | backend/cmd/installer/loader/example_test.go | 51 | // Step 3: User modifies values |
| LOW | backend/cmd/installer/loader/example_test.go | 56 | // Step 4: Save changes (creates backup automatically) |
| LOW | backend/pkg/tools/testdata/sploitus_result_nginx.json | 50 | "source": "## https://sploitus.com/exploit?id=PACKETSTORM:215599\nphpIPAM 1.4 LFI to RCE Exploit\n \n |
| LOW | backend/pkg/cast/chain_ast_test.go | 2585 | // Step 1: Create a chain with Gemini-style tool calls |
| LOW | backend/pkg/cast/chain_ast_test.go | 2647 | // Step 2: Parse the Gemini chain |
| LOW | backend/pkg/cast/chain_ast_test.go | 2656 | // Step 3: Normalize to Anthropic format |
| LOW | backend/pkg/cast/chain_ast_test.go | 2661 | // Step 4: Verify all tool call IDs are now in Anthropic format |
| LOW | backend/pkg/cast/chain_ast_test.go | 2711 | // Step 5: Verify the chain can be parsed again without errors |
| LOW | backend/pkg/cast/chain_ast_test.go | 2937 | // Step 1: Create chain with Anthropic-specific data |
| LOW | backend/pkg/cast/chain_ast_test.go | 2973 | // Step 2: Parse the chain |
| LOW | backend/pkg/cast/chain_ast_test.go | 2977 | // Step 3: Normalize to Gemini format |
| LOW | backend/pkg/cast/chain_ast_test.go | 2982 | // Step 4: Clear reasoning signatures |
| LOW | backend/pkg/cast/chain_ast_test.go | 2986 | // Step 5: Verify all changes |
| LOW | backend/pkg/cast/chain_ast_test.go | 3012 | // Step 6: Verify chain is still valid and parseable |
| LOW | backend/pkg/providers/provider/litellm_test.go | 529 | // Step 1: Load models from HTTP with LiteLLM prefix |
| LOW | backend/pkg/providers/provider/litellm_test.go | 548 | // Step 2: Simulate Model() call - should return without prefix |
| LOW | backend/pkg/providers/provider/litellm_test.go | 554 | // Step 3: Simulate ModelWithPrefix() call - should return with prefix |
| LOW | backend/pkg/providers/provider/litellm_test.go | 560 | // Step 4: Verify round-trip consistency |
| LOW | backend/pkg/providers/provider/litellm_test.go | 566 | // Step 5: Verify metadata preservation |
| LOW | backend/pkg/providers/provider/agents.go | 121 | // Step 0: Check if template is already in cache |
| LOW | backend/pkg/providers/provider/agents.go | 132 | // Step 1: Collect 5 sample tool call IDs in parallel |
| LOW | backend/pkg/graph/schema.resolvers.go | 1905 | // Step 1: Get flows for the period |
| LOW | backend/pkg/graph/schema.resolvers.go | 1941 | // Step 2: Build stats for each flow using analytics functions |
| LOW | backend/pkg/server/services/api_tokens_test.go | 732 | // Step 1: Create token |
| LOW | backend/pkg/server/services/api_tokens_test.go | 753 | // Step 2: Validate token works |
| LOW | backend/pkg/server/services/api_tokens_test.go | 758 | // Step 3: List tokens (should see it) |
| LOW | backend/pkg/server/services/api_tokens_test.go | 772 | // Step 4: Update token name |
| LOW | backend/pkg/server/services/api_tokens_test.go | 781 | // Step 5: Revoke token |
| LOW | backend/pkg/server/services/api_tokens_test.go | 790 | // Step 6: Verify revoked status in cache |
| LOW | backend/pkg/server/services/api_tokens_test.go | 797 | // Step 7: Delete token |
| LOW | backend/pkg/server/services/api_tokens_test.go | 804 | // Step 8: Verify soft delete |
| LOW | backend/pkg/server/services/api_tokens_test.go | 810 | // Step 9: Token should not be found after deletion |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | README.md | 2964 | LLM_SERVER_KEY=your_api_key |
| HIGH | backend/pkg/observability/langfuse/api/README.md | 101 | option.WithToken("<YOUR_API_KEY>"), |
| HIGH | backend/pkg/observability/langfuse/api/README.md | 101 | option.WithToken("<YOUR_API_KEY>"), |
| HIGH | backend/pkg/observability/langfuse/api/README.md | 112 | option.WithToken("<YOUR_API_KEY>"), |
| HIGH | backend/pkg/observability/langfuse/api/README.md | 112 | option.WithToken("<YOUR_API_KEY>"), |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | …ponents/shared/file-manager/file-manager-utils.test.ts | 107 | // instead of arithmetic keeps the test robust against month-length |
| MEDIUM | backend/pkg/tools/testdata/sploitus_result_nginx.json | 40 | "source": "## https://sploitus.com/exploit?id=PACKETSTORM:215609\n========================================== |
| MEDIUM | backend/pkg/tools/testdata/sploitus_result_nginx.json | 80 | "source": "## https://sploitus.com/exploit?id=8D7C8EA8-FA97-516C-805B-4D34248039FE\n\ud83d\udd25 LFI-Destroy |
| MEDIUM | …end/pkg/tools/testdata/ddg_result_docker_security.html | 315 | <a class="result__snippet" href="https://betterstack.com/community/guides/scaling-docker/docker- |
| MEDIUM | …end/pkg/tools/testdata/ddg_result_docker_security.html | 354 | <a class="result__snippet" href="https://www.geeksforgeeks.org/devops/docker-security-best-pract |
| MEDIUM | backend/pkg/providers/bedrock/models.yml | 1 | # Amazon Nova Series - Advanced multimodal models with state-of-the-art performance |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/pkg/providers/tester/runner_test.go | 145 | {Key: "Return JSON", Response: `{"name": "John Doe", "age": 30, "city": "New York"}`}, |
| LOW | backend/pkg/providers/tester/testdata/json_test.go | 22 | name: "John Doe" |
| LOW | backend/pkg/providers/tester/testdata/json_test.go | 55 | validJSON := `{"name": "John Doe", "age": 30, "city": "New York"}` |
| LOW | backend/pkg/providers/tester/testdata/json_test.go | 62 | invalidJSON := `{"name": "John Doe"}` |
| LOW | backend/pkg/providers/tester/testdata/tests.yml | 54 | name='John Doe', age=30, city='New York'; |
| LOW | backend/pkg/providers/tester/testdata/tests.yml | 57 | name: "John Doe" |
| LOW | backend/pkg/providers/tester/testdata/tests.yml | 85 | content: "Generate a JSON response for a user profile with username='user123', email='user@example.com', active=tr |
| LOW | backend/pkg/providers/tester/testdata/tests.yml | 88 | email: "user@example.com" |
| LOW | backend/pkg/providers/tester/testdata/tests.yml | 358 | content: "Return a JSON with a person's information: name='Jane Doe', age=25, city='Boston'" |
| LOW | backend/pkg/providers/tester/testdata/tests.yml | 360 | name: "Jane Doe" |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | backend/cmd/installer/main.go | 155 | # This file contains environment variables for PentAGI configuration. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | backend/pkg/tools/testdata/sploitus_result_nginx.json | 30 | "source": "## https://sploitus.com/exploit?id=AC4871CE-CE60-5709-98A9-551F3A9DB7A2\n# Ivanti EPMM pre-auth R |