Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks go from beginner to power user!
This report presents the forensic synthetic code analysis of zebbern/claude-code-guide, a Python project with 4,405 GitHub stars. SynthScan v2.0 examined 144,448 lines of code across 497 source files, recording 539 pattern matches distributed across 14 syntactic categories. The overall adjusted score of 6.4 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 539 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 28 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 30 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 99 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 101 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 128 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 130 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | skills/code-to-diagram/scripts/analyze_codebase.py | 207 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | skills/code-to-diagram/scripts/analyze_codebase.py | 209 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | skills/code-to-diagram/scripts/analyze_codebase.py | 215 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | skills/code-to-diagram/scripts/analyze_codebase.py | 217 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 366 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 368 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 395 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 397 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/sql-insight/scripts/sql_query_helper.py | 23 | # ─── SQL safety ───────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/sql-insight/scripts/sql_query_helper.py | 71 | # ─── Schema extraction ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/sql-insight/scripts/sql_query_helper.py | 289 | # ─── Query optimizer (rule-based) ─────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/sql-insight/scripts/sql_query_helper.py | 479 | # ─── EXPLAIN interpreter ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/sql-insight/scripts/sql_query_helper.py | 788 | # ─── Compact schema formatter ─────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/sql-insight/scripts/sql_query_helper.py | 819 | # ─── CLI ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/code-vuln-audit/scripts/security_scan.py | 22 | # ── Severity ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/code-vuln-audit/scripts/security_scan.py | 31 | # ── Directories to always skip ─────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/code-vuln-audit/scripts/security_scan.py | 40 | # ── Binary extensions to skip ──────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 53 | # ── File extension → language tag ──────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 81 | # ── Secret regex patterns ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 171 | # ── OWASP patterns ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 374 | # ── Entropy ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 397 | # ── Finding ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 424 | # ── File walker ────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 463 | # ── Dependency scanner ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 579 | # ── Secret scanner ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 634 | # ── OWASP scanner ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 692 | # ── Reporter ───────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 764 | # ── Deduplication ──────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 779 | # ── Main ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/audit-flow/scripts/audit.py | 1040 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | skills/audit-flow/scripts/audit.py | 1042 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 873 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 875 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1079 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1082 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1138 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1140 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1178 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1180 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1203 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1205 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1255 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1257 | # ----------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1283 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1285 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | skills/playwright/core/configuration.md | 30 | // ── Test discovery ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/playwright/core/configuration.md | 34 | // ── Execution ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/playwright/core/configuration.md | 40 | // ── Reporting ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/playwright/core/configuration.md | 45 | // ── Timeouts ──────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | skills/playwright/core/configuration.md | 51 | // ── Shared browser context options ────────────────────────────── | COMMENT |
| MEDIUM | skills/playwright/core/configuration.md | 70 | // ── Projects (browser targets) ───────────────────────────────── | COMMENT |
| MEDIUM | skills/playwright/core/configuration.md | 94 | // ── Dev server ────────────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/playwright/core/mobile-and-responsive.md | 721 | // ── Desktop ──────────────────────────────────────────── | COMMENT |
| MEDIUM | skills/playwright/core/mobile-and-responsive.md | 735 | // ── Mobile ───────────────────────────────────────────── | COMMENT |
| 28 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | skills/broken-authentication/SKILL.md | 202 | # Step 1: Get session before login | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 206 | # Step 2: Login with same session | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 211 | # Step 3: Check if session changed | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 406 | # Step 1: Identify lockout threshold | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 410 | # Step 2: Test bypass via IP rotation | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 420 | # Step 3: Test bypass via case manipulation | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 431 | # Step 1: Capture JWT token | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 434 | # Step 2: Decode and analyze | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 438 | # Step 3: Try "none" algorithm attack | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 443 | # Step 4: Submit modified token | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 452 | # Step 1: Request reset for test account | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 456 | # Step 2: Capture reset link | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 459 | # Step 3: Test token properties | COMMENT |
| LOW⚡ | skills/broken-authentication/SKILL.md | 464 | # Step 4: Test for user parameter manipulation | COMMENT |
| LOW | skills/active-directory-attacks/SKILL.md | 48 | ### Step 1: Kerberos Clock Sync | COMMENT |
| LOW | skills/active-directory-attacks/SKILL.md | 66 | ### Step 2: AD Reconnaissance with BloodHound | COMMENT |
| LOW | skills/active-directory-attacks/SKILL.md | 81 | ### Step 3: PowerView Enumeration | COMMENT |
| LOW | …ls/code-documenter/references/user-guides-tutorials.md | 75 | ## Step 1: Set Up the Project | COMMENT |
| LOW | …ls/code-documenter/references/user-guides-tutorials.md | 85 | ## Step 2: Fetch Users | COMMENT |
| LOW | …ls/code-documenter/references/user-guides-tutorials.md | 106 | ## Step 3: Create the Component | COMMENT |
| LOW | …ls/code-documenter/references/user-guides-tutorials.md | 150 | ## Step 4: Test It | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 363 | # Step 1: Identify potential parameters | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 366 | # Step 2: Test basic traversal | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 369 | # Step 3: Test encoding variations | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 373 | # Step 4: Test bypass techniques | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 377 | # Step 5: Test absolute paths | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 380 | # Step 6: Test with null bytes (legacy) | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 383 | # Step 7: Attempt wrapper exploitation | COMMENT |
| LOW⚡ | skills/file-path-traversal/SKILL.md | 386 | # Step 8: Attempt log poisoning for RCE | COMMENT |
| LOW⚡ | skills/sql-insight/SKILL.md | 30 | # Step 1: Extract schema (compact mode, suitable for LLM context) | COMMENT |
| LOW⚡ | skills/sql-insight/SKILL.md | 33 | # Step 2: Analyze SQL optimization suggestions | COMMENT |
| LOW⚡ | skills/sql-insight/SKILL.md | 36 | # Step 3: View EXPLAIN execution plan | COMMENT |
| LOW | skills/idor-testing/SKILL.md | 86 | # Step 1: Capture original authenticated request | COMMENT |
| LOW | skills/idor-testing/SKILL.md | 90 | # Step 2: Modify ID to target another user | COMMENT |
| LOW | skills/idor-testing/SKILL.md | 328 | # Step 1: Enumerate user roles | COMMENT |
| LOW | skills/idor-testing/SKILL.md | 333 | # Step 2: Access admin functions with discovered ID | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 408 | # Step 1: Service discovery | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 411 | # Step 2: Banner grab | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 416 | # Step 3: User enumeration | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 419 | # Step 4: Open relay test | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 422 | # Step 5: Authentication test | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 425 | # Step 6: TLS check | COMMENT |
| LOW⚡ | skills/smtp-penetration-testing/SKILL.md | 428 | # Step 7: Check email authentication | COMMENT |
| LOW | skills/pdf/forms.md | 81 | ## Step 1: Try Structure Extraction First | COMMENT |
| LOW | skills/pdf/forms.md | 270 | ## Step 2: Validate Before Filling | COMMENT |
| LOW | skills/pdf/forms.md | 281 | ## Step 3: Fill the Form | COMMENT |
| LOW | skills/pdf/forms.md | 286 | ## Step 4: Verify Output | COMMENT |
| LOW | skills/playwright/playwright-cli/storage-and-auth.md | 93 | ### Step 1: Log In and Save | COMMENT |
| LOW | skills/playwright/playwright-cli/storage-and-auth.md | 114 | ### Step 2: Reuse Auth State | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/advanced-workflows.md | 405 | # Step 1: Personal Info | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/advanced-workflows.md | 414 | # Step 2: Address | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/advanced-workflows.md | 423 | # Step 3: Upload Documents | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/advanced-workflows.md | 429 | # Step 4: Review and Submit | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/running-custom-code.md | 499 | // Step 1: Personal info | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/running-custom-code.md | 505 | // Step 2: Address | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/running-custom-code.md | 513 | // Step 3: Confirm and submit | COMMENT |
| LOW⚡ | skills/playwright/core/forms-and-validation.md | 416 | // Step 1: Shipping | COMMENT |
| LOW⚡ | skills/playwright/core/forms-and-validation.md | 428 | // Step 2: Payment | COMMENT |
| LOW | skills/playwright/core/forms-and-validation.md | 439 | // Step 3: Review | COMMENT |
| LOW⚡ | skills/playwright/core/api-testing.md | 1334 | // Step 1: Create a product | COMMENT |
| 64 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | README.md | 329 | export CLAUDE_CODE_USER_EMAIL="user@example.com" # Override user email (SDK / automation flows) | CODE |
| LOW | skills/database-optimizer/references/mysql-tuning.md | 258 | SELECT name, created_at FROM users WHERE email = 'user@example.com'; | CODE |
| LOW | skills/database-optimizer/references/mysql-tuning.md | 263 | WHERE email = 'user@example.com'; | CODE |
| LOW | …ills/database-optimizer/references/index-strategies.md | 97 | WHERE email = 'user@example.com'; | CODE |
| LOW | …/code-documenter/references/api-docs-nestjs-express.md | 56 | example: "John Doe", | CODE |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 27 | example: "user@example.com" | CODE |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 230 | @example "user@example.com" | STRING |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 236 | @example "John Doe" | STRING |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 438 | name="John Doe", | CODE |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 452 | name: "John Doe", | CODE |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 465 | Name: "John Doe", | CODE |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 481 | name: 'John Doe', | CODE |
| LOW | …lls/code-documenter/references/interactive-api-docs.md | 534 | name: "John Doe", | CODE |
| LOW | …/code-documenter/references/api-docs-fastapi-django.md | 16 | name: str = Field(..., min_length=1, max_length=100, example="John Doe") | CODE |
| LOW | skills/idor-testing/SKILL.md | 275 | "street": "123 Main St", | CODE |
| LOW | skills/typescript-pro/references/type-guards.md | 270 | const email: Email = createEmail("user@example.com") | CODE |
| LOW | …lls/playwright/playwright-cli/tracing-and-debugging.md | 227 | playwright-cli fill e1 "Jane Doe" | CODE |
| LOW | …lls/playwright/playwright-cli/tracing-and-debugging.md | 388 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/storage-and-auth.md | 99 | playwright-cli fill e1 "admin@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/storage-and-auth.md | 131 | playwright-cli fill e1 "admin@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/storage-and-auth.md | 138 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/storage-and-auth.md | 332 | localStorage.setItem('user_name', 'Jane Doe'); | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 12 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 13 | # Output: await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com'); | COMMENT |
| LOW | skills/playwright/playwright-cli/test-generation.md | 49 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 51 | # await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com'); | COMMENT |
| LOW | skills/playwright/playwright-cli/test-generation.md | 71 | await page.getByRole("textbox", { name: "Email" }).fill("user@example.com") | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 86 | await page.getByRole("textbox", { name: "Email" }).fill("user@example.com") | CODE |
| LOW⚡ | skills/playwright/playwright-cli/test-generation.md | 130 | playwright-cli fill e1 "Jane Doe" | CODE |
| LOW⚡ | skills/playwright/playwright-cli/test-generation.md | 131 | # await page.getByRole('textbox', { name: 'Full Name' }).fill('Jane Doe'); | COMMENT |
| LOW⚡ | skills/playwright/playwright-cli/test-generation.md | 132 | playwright-cli fill e2 "123 Main St" | CODE |
| LOW⚡ | skills/playwright/playwright-cli/test-generation.md | 133 | # await page.getByRole('textbox', { name: 'Address' }).fill('123 Main St'); | COMMENT |
| LOW | skills/playwright/playwright-cli/test-generation.md | 150 | playwright-cli fill e1 "Acme Corp" | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 239 | await page.getByRole("textbox", { name: "Full Name" }).fill("Jane Doe") | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 240 | await page.getByRole("textbox", { name: "Address" }).fill("123 Main St") | CODE |
| LOW | skills/playwright/playwright-cli/test-generation.md | 302 | name: "Jane Doe", | CODE |
| LOW | skills/playwright/playwright-cli/advanced-workflows.md | 66 | await popup.fill('input[name=email]', 'user@example.com'); | CODE |
| LOW⚡ | skills/playwright/playwright-cli/advanced-workflows.md | 416 | playwright-cli fill e1 "123 Main Street" | CODE |
| LOW | skills/playwright/playwright-cli/advanced-workflows.md | 450 | await page.fill('#company-name', 'Acme Corp'); | CODE |
| LOW | skills/playwright/playwright-cli/advanced-workflows.md | 455 | await page.fill('#contact-name', 'Jane Doe'); | CODE |
| LOW | skills/playwright/playwright-cli/running-custom-code.md | 465 | await page.fill('input[name=email]', 'user@example.com'); | CODE |
| LOW⚡ | skills/playwright/playwright-cli/running-custom-code.md | 507 | await page.fill('#street', '123 Main St'); | CODE |
| LOW | skills/playwright/playwright-cli/core-commands.md | 11 | playwright-cli fill e1 "user@example.com" # Fill an input field | CODE |
| LOW | skills/playwright/playwright-cli/core-commands.md | 35 | playwright-cli fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/core-commands.md | 145 | playwright-cli fill e5 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/core-commands.md | 309 | playwright-cli fill e1 "admin@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/core-commands.md | 324 | playwright-cli fill e1 "Jane Doe" | CODE |
| LOW | skills/playwright/playwright-cli/session-management.md | 14 | playwright-cli -s=auth fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/session-management.md | 75 | playwright-cli -s=admin fill e1 "admin@example.com" | CODE |
| LOW | skills/playwright/playwright-cli/session-management.md | 277 | playwright-cli -s=login fill e1 "user@example.com" | CODE |
| LOW | skills/playwright/pom/pom-vs-fixtures-vs-helpers.md | 829 | await login.emailInput.fill("user@example.com") | CODE |
| LOW⚡ | skills/playwright/core/forms-and-validation.md | 420 | await page.getByLabel("Address").fill("123 Main St") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 10 | await page.getByLabel("Name").fill("Jane Doe") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 215 | await page.getByLabel("Name").fill("Jane Doe") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 260 | await page.getByLabel("Name").fill("Jane Doe") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 444 | await expect(page.getByText("123 Main St")).toBeVisible() | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 469 | await page.getByLabel("Address").fill("123 Main St") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 479 | await expect(page.getByLabel("Address")).toHaveValue("123 Main St") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 495 | await page.getByLabel("Address").fill("123 Main St") | CODE |
| LOW | skills/playwright/core/forms-and-validation.md | 516 | await expect(page.getByText("123 Main St")).toBeVisible() | CODE |
| 144 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 2777 | print(f"Error: Invalid JSON input: {e}", file=sys.stderr) | CODE |
| MEDIUM | README.md | 2816 | print(f"Error: Invalid JSON input: {e}", file=sys.stderr) | CODE |
| MEDIUM | README.md | 2865 | print(f"Error: Invalid JSON input: {e}", file=sys.stderr) | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 277 | except Exception as e: | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 456 | except Exception as e: | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 479 | except Exception as e: | CODE |
| MEDIUM | skills/code-to-diagram/scripts/analyze_codebase.py | 442 | print(f"Error: '{args.directory}' is not a valid directory", file=sys.stderr) | CODE |
| LOW | skills/sql-insight/scripts/sql_query_helper.py | 945 | except Exception as e: | CODE |
| MEDIUM⚡ | skills/timeline-builder/scripts/generate_timeline.py | 600 | print(f"Error: config file not found: {args.config}", file=sys.stderr) | STRING |
| MEDIUM⚡ | skills/timeline-builder/scripts/generate_timeline.py | 603 | print(f"Error: invalid JSON - {e}", file=sys.stderr) | STRING |
| MEDIUM⚡ | skills/timeline-builder/scripts/generate_timeline.py | 607 | print("Error: no events in config", file=sys.stderr) | STRING |
| MEDIUM | skills/code-vuln-audit/scripts/security_scan.py | 846 | print(f"Error: '{args.target}' is not a directory", file=sys.stderr) | STRING |
| LOW | skills/ssh-penetration-testing/SKILL.md | 349 | except Exception as e: | CODE |
| MEDIUM⚡ | skills/audit-flow/scripts/audit.py | 1029 | print(f"Error: Ours CSV directory not found at {ours_dir}", file=sys.stderr) | CODE |
| MEDIUM⚡ | skills/audit-flow/scripts/audit.py | 1034 | print(f"Error: Theirs directory not found at {theirs_dir}", file=sys.stderr) | CODE |
| MEDIUM | skills/audit-flow/scripts/audit.py | 111 | print(f"Error: Database not found at {DB_PATH}", file=sys.stderr) | CODE |
| MEDIUM | skills/audit-flow/scripts/audit.py | 935 | print(f"Error: CSV directory not found at {CSV_DIR}", file=sys.stderr) | CODE |
| MEDIUM | skills/audit-flow/scripts/audit.py | 943 | print(f"Error: Missing CSV file: {csv_path}", file=sys.stderr) | CODE |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1518 | print(f"Error: ours DB not found: {ours_path}", file=sys.stderr) | CODE |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1521 | print(f"Error: theirs DB not found: {theirs_path}", file=sys.stderr) | CODE |
| MEDIUM | skills/audit-flow/scripts/audit.py | 1570 | print("Error: not in a git repository", file=sys.stderr) | CODE |
| LOW | skills/pdf/reference.md | 503 | except Exception as e: | CODE |
| LOW | skills/pdf/reference.md | 523 | except Exception as e: | CODE |
| LOW | skills/pdf/reference.md | 604 | except Exception as e: | CODE |
| LOW | skills/database-scout/scripts/db_explorer.py | 464 | except Exception as e: | CODE |
| MEDIUM | skills/shodan-reconnaissance/SKILL.md | 472 | print(f"Error: {e}") | CODE |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 580 | except Exception: | CODE |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 648 | except Exception as e: | CODE |
| LOW | skills/html-injection-testing/SKILL.md | 393 | except Exception as e: | CODE |
| LOW | …ills/regression-modeler/scripts/regression_analyzer.py | 49 | except Exception: | CODE |
| LOW | …ills/regression-modeler/scripts/regression_analyzer.py | 244 | except Exception as e: | CODE |
| LOW | …ills/regression-modeler/scripts/regression_analyzer.py | 308 | except Exception as e: | CODE |
| LOW | …ills/regression-modeler/scripts/regression_analyzer.py | 333 | except Exception: | CODE |
| MEDIUM | skills/route-to-openapi/scripts/generate_api_doc.py | 606 | print(f"Error: '{source_dir}' is not a directory.", file=sys.stderr) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | README.md | 3892 | export ANTHROPIC_AUTH_TOKEN=${YOUR_API_KEY} | CODE |
| HIGH | skills/dev-guide-generator/SKILL.md | 112 | - When configuration files are involved, use placeholders (e.g., `YOUR_API_KEY`) and explain how to obtain the real v | CODE |
| HIGH | …ls/code-documenter/references/documentation-systems.md | 40 | apiKey: "YOUR_API_KEY", | CODE |
| HIGH | …ls/code-documenter/references/documentation-systems.md | 201 | apiKey: 'YOUR_API_KEY', | CODE |
| HIGH | skills/shodan-reconnaissance/SKILL.md | 51 | shodan init YOUR_API_KEY | CODE |
| HIGH | skills/shodan-reconnaissance/SKILL.md | 279 | api = shodan.Shodan('YOUR_API_KEY') | CODE |
| HIGH | skills/shodan-reconnaissance/SKILL.md | 440 | API_KEY = 'YOUR_API_KEY' | CODE |
| HIGH | skills/shodan-reconnaissance/SKILL.md | 498 | | No API Key Configured | Key not initialized | Run `shodan init YOUR_API_KEY` then verify with `shodan info` | | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/code-to-diagram/scripts/analyze_codebase.py | 169 | CODE | |
| LOW | skills/code-to-diagram/scripts/analyze_codebase.py | 320 | CODE | |
| LOW | skills/code-to-diagram/scripts/analyze_codebase.py | 33 | CODE | |
| LOW | skills/sql-insight/scripts/sql_query_helper.py | 869 | CODE | |
| LOW | skills/code-vuln-audit/scripts/security_scan.py | 582 | CODE | |
| LOW | skills/code-vuln-audit/scripts/security_scan.py | 637 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 508 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 602 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 666 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 907 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 932 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 1015 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 1304 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 1618 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 1210 | CODE | |
| LOW | skills/pdf/scripts/fill_fillable_fields.py | 11 | CODE | |
| LOW | skills/pdf/scripts/fill_fillable_fields.py | 55 | CODE | |
| LOW | skills/pdf/scripts/extract_form_field_info.py | 19 | CODE | |
| LOW | skills/pdf/scripts/extract_form_field_info.py | 47 | CODE | |
| LOW | skills/pdf/scripts/extract_form_structure.py | 20 | CODE | |
| LOW | skills/pdf/scripts/check_bounding_boxes.py | 15 | CODE | |
| LOW | skills/http-load-profiler/scripts/http_benchmark.py | 97 | CODE | |
| LOW | skills/http-load-profiler/scripts/http_benchmark.py | 328 | CODE | |
| LOW | skills/database-scout/scripts/db_explorer.py | 424 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 43 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 62 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 78 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 138 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 248 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 299 | CODE | |
| LOW | …/dataset-quality-audit/scripts/data_quality_checker.py | 530 | CODE | |
| LOW | …ills/regression-modeler/scripts/regression_analyzer.py | 20 | CODE | |
| LOW | …ills/regression-modeler/scripts/regression_analyzer.py | 54 | CODE | |
| LOW | skills/route-to-openapi/scripts/generate_api_doc.py | 44 | CODE | |
| LOW | skills/route-to-openapi/scripts/generate_api_doc.py | 641 | CODE | |
| LOW | skills/route-to-openapi/scripts/generate_api_doc.py | 162 | CODE | |
| LOW | skills/route-to-openapi/scripts/generate_api_doc.py | 200 | CODE | |
| LOW | skills/data-viz-renderer/scripts/build_infographic.py | 602 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | archive/collection/django/django-api-developer.md | 765 | def test_list_products_unauthenticated(self): | CODE |
| LOW | archive/collection/django/django-api-developer.md | 770 | def test_list_products_authenticated(self): | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 723 | def update_product_popularity(sender, instance, action, pk_set, **kwargs): | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 732 | def prevent_category_deletion_with_products(sender, instance, **kwargs): | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 773 | def test_is_available_property(self): | CODE |
| LOW | archive/collection/django/django-backend-expert.md | 795 | def test_create_order_success(self, mock_payment): | CODE |
| LOW | archive/collection/django/django-orm-expert.md | 181 | def search_products_optimized(query): | CODE |
| LOW | archive/collection/django/django-orm-expert.md | 277 | def get_sales_report_by_period(start_date, end_date): | CODE |
| LOW | archive/collection/django/django-orm-expert.md | 728 | def update_denormalized_fields(): | STRING |
| LOW | archive/collection/django/django-orm-expert.md | 782 | def test_n_plus_one_prevention(self): | CODE |
| LOW | archive/collection/django/django-orm-expert.md | 790 | def test_complex_aggregation_performance(self): | CODE |
| LOW⚡ | skills/code-to-diagram/scripts/analyze_codebase.py | 219 | def generate_architecture_diagram( | CODE |
| LOW | skills/pdf/scripts/fill_fillable_fields.py | 55 | def validation_error_for_field_value(field_info, field_value): | CODE |
| LOW | skills/pdf/scripts/extract_form_field_info.py | 9 | def get_full_annotation_field_id(annotation): | CODE |
| LOW | skills/pdf/scripts/check_bounding_boxes.py | 15 | def get_bounding_box_messages(fields_json_stream) -> list[str]: | CODE |
| LOW | skills/pdf/scripts/fill_pdf_form_with_annotations.py | 10 | def transform_from_image_coords(bbox, image_width, image_height, pdf_width, pdf_height): | CODE |
| LOW | skills/pdf/scripts/fill_pdf_form_with_annotations.py | 23 | def transform_from_pdf_coords(bbox, pdf_height): | CODE |
| LOW | skills/test-suite-architect/scripts/init_qa_project.py | 21 | def create_directory_structure(base_path): | CODE |
| LOW | skills/test-suite-architect/scripts/init_qa_project.py | 35 | def create_test_execution_tracking(base_path, project_name): | CODE |
| LOW | skills/test-suite-architect/scripts/init_qa_project.py | 58 | def create_bug_tracking_template(base_path): | CODE |
| LOW | skills/test-suite-architect/scripts/init_qa_project.py | 179 | def create_weekly_report_template(base_path): | STRING |
| LOW | skills/caching/SKILL.md | 62 | export function getOrSet<T>(key: string, ttlMs: number, compute: () => T): T { | CODE |
| LOW | skills/log-error-digest/scripts/analyze_logs.py | 275 | def compute_time_distribution(entries: list[dict]) -> tuple: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CHANGELOG.md | 149 | - Changed `/review <pr>` back to a fast single-pass review; use `/code-review <level> <pr#>` for the multi-agent review | CODE |
| MEDIUM | README.md | 317 | export CLAUDE_CODE_DISABLE_1M_CONTEXT=1 # Disable 1 M-token context window (use default shorter context) | CODE |
| MEDIUM | README.md | 590 | claude --max-turns 3 -p "query" # Limit agentic turns (print mode only) | CODE |
| MEDIUM | README.md | 606 | /workflows # View dynamic workflows and background orchestration | CODE |
| MEDIUM | skills/playwright/core/configuration.md | 8 | npx playwright init # scaffold config + first test | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | archive/collection/django/django-backend-expert.md | 206 | from django.core.exceptions import ValidationError | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | skills/code-documenter/references/python-docstrings.md | 7 | Calculate total cost including tax. Args: items: List of items to calculate total for. tax_rate: Ta | STRING |
| HIGH | …/code-documenter/references/api-docs-fastapi-django.md | 34 | Create a new user account. Args: user: User creation data including name and email. Returns: C | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/scanning-tools/SKILL.md | 501 | COMMENT | |
| LOW | skills/playwright/playwright-cli/test-generation.md | 41 | COMMENT | |
| LOW | skills/windows-privilege-escalation/SKILL.md | 241 | # Install (runs as SYSTEM) | COMMENT |
| LOW | skills/shodan-reconnaissance/SKILL.md | 81 | # Country: Australia | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/audit-flow/scripts/audit.py | 20 | CODE | |
| LOW | skills/audit-flow/scripts/audit.py | 25 | CODE | |
| LOW | skills/localization-toolkit/scripts/i18n_audit.py | 8 | CODE | |
| LOW | skills/test-suite-architect/scripts/init_qa_project.py | 15 | CODE | |
| LOW | skills/route-to-openapi/scripts/generate_api_doc.py | 12 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/workflows/sync-release-notes.yml | 136 | # Check if file needs updating | COMMENT |
| LOW | .github/workflows/sync-release-notes.yml | 235 | # Check if there are changes to commit | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ills/test-suite-architect/scripts/calculate_metrics.py | 17 | """Calculate comprehensive QA metrics from tracking CSV.""" | STRING |