Home / zebbern / claude-code-guide
AI Slop Code RIsk Monitor

zebbern/claude-code-guide

Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks from beginner to power user!

7.0 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for zebbern/claude-code-guide, a Python project with 4,655 GitHub stars. SynthScan examined 135,166 lines of code across 369 source files, recording 534 pattern matches distributed across 14 syntactic categories. The legacy adjusted pattern signal is 7.0 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

7.0
Adjusted Signal
7.0
Raw Pattern Score
100%
Time Factor
2026-10-10
Last Push
4.7K
Stars
Python
Language
135.2K
Lines of Code
369
Files
534
Pattern Hits
2026-10-12
Scan Date
0.05
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 11.2/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 191 finding(s).

Hallucinated Dependency & Supply Chain Risk 9.1/100 · LOW

Are imports declared and package/API names verified? 215 finding(s).

Agent Over-Engineering Ratio 13.3/100 · LOW

Are wrappers, guards, and repeated structures necessary? 140 finding(s).

PR Review Velocity Impact 27.1/100 · MEDIUM

Which changes need focused human review? 534 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 0HIGH 18MEDIUM 115LOW 401

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 534 distinct pattern matches across 14 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Decorative Section Separators88 hits · 285 pts
SeverityFileLineSnippetContext
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py28# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py30# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py99# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py101# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py128# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py130# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡skills/code-to-diagram/scripts/analyze_codebase.py207# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡skills/code-to-diagram/scripts/analyze_codebase.py209# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡skills/code-to-diagram/scripts/analyze_codebase.py215# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡skills/code-to-diagram/scripts/analyze_codebase.py217# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py366# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py368# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py395# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py397# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/sql-insight/scripts/sql_query_helper.py23# ─── SQL safety ─────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/sql-insight/scripts/sql_query_helper.py71# ─── Schema extraction ──────────────────────────────────────────────────────COMMENT
MEDIUMskills/sql-insight/scripts/sql_query_helper.py289# ─── Query optimizer (rule-based) ───────────────────────────────────────────COMMENT
MEDIUMskills/sql-insight/scripts/sql_query_helper.py479# ─── EXPLAIN interpreter ────────────────────────────────────────────────────COMMENT
MEDIUMskills/sql-insight/scripts/sql_query_helper.py788# ─── Compact schema formatter ───────────────────────────────────────────────COMMENT
MEDIUMskills/sql-insight/scripts/sql_query_helper.py819# ─── CLI ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡skills/code-vuln-audit/scripts/security_scan.py22# ── Severity ─────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡skills/code-vuln-audit/scripts/security_scan.py31# ── Directories to always skip ───────────────────────────────────────────────COMMENT
MEDIUM⚡skills/code-vuln-audit/scripts/security_scan.py40# ── Binary extensions to skip ────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py53# ── File extension → language tag ────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py81# ── Secret regex patterns ────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py171# ── OWASP patterns ───────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py374# ── Entropy ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py397# ── Finding ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py424# ── File walker ──────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py463# ── Dependency scanner ───────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py579# ── Secret scanner ───────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py634# ── OWASP scanner ────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py692# ── Reporter ─────────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py764# ── Deduplication ────────────────────────────────────────────────────────────COMMENT
MEDIUMskills/code-vuln-audit/scripts/security_scan.py779# ── Main ─────────────────────────────────────────────────────────────────────COMMENT
MEDIUM⚡skills/audit-flow/scripts/audit.py1040 # -----------------------------------------------------------------------COMMENT
MEDIUM⚡skills/audit-flow/scripts/audit.py1042 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py873# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py875# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1079 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1082 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1138 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1140 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1178 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1180 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1203 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1205 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1255 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1257 # -----------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1283# ---------------------------------------------------------------------------COMMENT
MEDIUMskills/audit-flow/scripts/audit.py1285# ---------------------------------------------------------------------------COMMENT
MEDIUM⚡skills/playwright/core/configuration.md30 // ── Test discovery ──────────────────────────────────────────────COMMENT
MEDIUM⚡skills/playwright/core/configuration.md34 // ── Execution ───────────────────────────────────────────────────COMMENT
MEDIUM⚡skills/playwright/core/configuration.md40 // ── Reporting ───────────────────────────────────────────────────COMMENT
MEDIUM⚡skills/playwright/core/configuration.md45 // ── Timeouts ────────────────────────────────────────────────────COMMENT
MEDIUM⚡skills/playwright/core/configuration.md51 // ── Shared browser context options ──────────────────────────────COMMENT
MEDIUMskills/playwright/core/configuration.md70 // ── Projects (browser targets) ─────────────────────────────────COMMENT
MEDIUMskills/playwright/core/configuration.md94 // ── Dev server ──────────────────────────────────────────────────COMMENT
MEDIUMskills/playwright/core/mobile-and-responsive.md721 // ── Desktop ────────────────────────────────────────────COMMENT
MEDIUMskills/playwright/core/mobile-and-responsive.md735 // ── Mobile ─────────────────────────────────────────────COMMENT
28 more matches not shown…
Structural Annotation Overuse124 hits · 240 pts
SeverityFileLineSnippetContext
LOW⚡skills/broken-authentication/SKILL.md202# Step 1: Get session before loginCOMMENT
LOW⚡skills/broken-authentication/SKILL.md206# Step 2: Login with same sessionCOMMENT
LOW⚡skills/broken-authentication/SKILL.md211# Step 3: Check if session changedCOMMENT
LOW⚡skills/broken-authentication/SKILL.md406# Step 1: Identify lockout thresholdCOMMENT
LOW⚡skills/broken-authentication/SKILL.md410# Step 2: Test bypass via IP rotationCOMMENT
LOW⚡skills/broken-authentication/SKILL.md420# Step 3: Test bypass via case manipulationCOMMENT
LOW⚡skills/broken-authentication/SKILL.md431# Step 1: Capture JWT tokenCOMMENT
LOW⚡skills/broken-authentication/SKILL.md434# Step 2: Decode and analyzeCOMMENT
LOW⚡skills/broken-authentication/SKILL.md438# Step 3: Try "none" algorithm attackCOMMENT
LOW⚡skills/broken-authentication/SKILL.md443# Step 4: Submit modified tokenCOMMENT
LOW⚡skills/broken-authentication/SKILL.md452# Step 1: Request reset for test accountCOMMENT
LOW⚡skills/broken-authentication/SKILL.md456# Step 2: Capture reset linkCOMMENT
LOW⚡skills/broken-authentication/SKILL.md459# Step 3: Test token propertiesCOMMENT
LOW⚡skills/broken-authentication/SKILL.md464# Step 4: Test for user parameter manipulationCOMMENT
LOWskills/active-directory-attacks/SKILL.md48### Step 1: Kerberos Clock SyncCOMMENT
LOWskills/active-directory-attacks/SKILL.md66### Step 2: AD Reconnaissance with BloodHoundCOMMENT
LOWskills/active-directory-attacks/SKILL.md81### Step 3: PowerView EnumerationCOMMENT
LOW…ls/code-documenter/references/user-guides-tutorials.md75## Step 1: Set Up the ProjectCOMMENT
LOW…ls/code-documenter/references/user-guides-tutorials.md85## Step 2: Fetch UsersCOMMENT
LOW…ls/code-documenter/references/user-guides-tutorials.md106## Step 3: Create the ComponentCOMMENT
LOW…ls/code-documenter/references/user-guides-tutorials.md150## Step 4: Test ItCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md363# Step 1: Identify potential parametersCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md366# Step 2: Test basic traversalCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md369# Step 3: Test encoding variationsCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md373# Step 4: Test bypass techniquesCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md377# Step 5: Test absolute pathsCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md380# Step 6: Test with null bytes (legacy)COMMENT
LOW⚡skills/file-path-traversal/SKILL.md383# Step 7: Attempt wrapper exploitationCOMMENT
LOW⚡skills/file-path-traversal/SKILL.md386# Step 8: Attempt log poisoning for RCECOMMENT
LOW⚡skills/sql-insight/SKILL.md30# Step 1: Extract schema (compact mode, suitable for LLM context)COMMENT
LOW⚡skills/sql-insight/SKILL.md33# Step 2: Analyze SQL optimization suggestionsCOMMENT
LOW⚡skills/sql-insight/SKILL.md36# Step 3: View EXPLAIN execution planCOMMENT
LOWskills/idor-testing/SKILL.md86# Step 1: Capture original authenticated requestCOMMENT
LOWskills/idor-testing/SKILL.md90# Step 2: Modify ID to target another userCOMMENT
LOWskills/idor-testing/SKILL.md328# Step 1: Enumerate user rolesCOMMENT
LOWskills/idor-testing/SKILL.md333# Step 2: Access admin functions with discovered IDCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md408# Step 1: Service discoveryCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md411# Step 2: Banner grabCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md416# Step 3: User enumerationCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md419# Step 4: Open relay testCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md422# Step 5: Authentication testCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md425# Step 6: TLS checkCOMMENT
LOW⚡skills/smtp-penetration-testing/SKILL.md428# Step 7: Check email authenticationCOMMENT
LOWskills/pdf/forms.md81## Step 1: Try Structure Extraction FirstCOMMENT
LOWskills/pdf/forms.md270## Step 2: Validate Before FillingCOMMENT
LOWskills/pdf/forms.md281## Step 3: Fill the FormCOMMENT
LOWskills/pdf/forms.md286## Step 4: Verify OutputCOMMENT
LOWskills/playwright/playwright-cli/storage-and-auth.md93### Step 1: Log In and SaveCOMMENT
LOWskills/playwright/playwright-cli/storage-and-auth.md114### Step 2: Reuse Auth StateCOMMENT
LOW⚡skills/playwright/playwright-cli/advanced-workflows.md405# Step 1: Personal InfoCOMMENT
LOW⚡skills/playwright/playwright-cli/advanced-workflows.md414# Step 2: AddressCOMMENT
LOW⚡skills/playwright/playwright-cli/advanced-workflows.md423# Step 3: Upload DocumentsCOMMENT
LOW⚡skills/playwright/playwright-cli/advanced-workflows.md429# Step 4: Review and SubmitCOMMENT
LOW⚡skills/playwright/playwright-cli/running-custom-code.md499 // Step 1: Personal infoCOMMENT
LOW⚡skills/playwright/playwright-cli/running-custom-code.md505 // Step 2: AddressCOMMENT
LOW⚡skills/playwright/playwright-cli/running-custom-code.md513 // Step 3: Confirm and submitCOMMENT
LOW⚡skills/playwright/core/forms-and-validation.md416 // Step 1: ShippingCOMMENT
LOW⚡skills/playwright/core/forms-and-validation.md428 // Step 2: PaymentCOMMENT
LOWskills/playwright/core/forms-and-validation.md439 // Step 3: ReviewCOMMENT
LOW⚡skills/playwright/core/api-testing.md1334 // Step 1: Create a productCOMMENT
64 more matches not shown…
Fake / Example Data203 hits · 218 pts
SeverityFileLineSnippetContext
LOWskills/database-optimizer/references/mysql-tuning.md258SELECT name, created_at FROM users WHERE email = 'user@example.com';CODE
LOWskills/database-optimizer/references/mysql-tuning.md263WHERE email = 'user@example.com';CODE
LOW…ills/database-optimizer/references/index-strategies.md97WHERE email = 'user@example.com';CODE
LOW…/code-documenter/references/api-docs-nestjs-express.md56 example: "John Doe",CODE
LOW…lls/code-documenter/references/interactive-api-docs.md27 example: "user@example.com"CODE
LOW…lls/code-documenter/references/interactive-api-docs.md230 @example "user@example.com"STRING
LOW…lls/code-documenter/references/interactive-api-docs.md236 @example "John Doe"STRING
LOW…lls/code-documenter/references/interactive-api-docs.md438 name="John Doe",CODE
LOW…lls/code-documenter/references/interactive-api-docs.md452 name: "John Doe",CODE
LOW…lls/code-documenter/references/interactive-api-docs.md465 Name: "John Doe",CODE
LOW…lls/code-documenter/references/interactive-api-docs.md481 name: 'John Doe',CODE
LOW…lls/code-documenter/references/interactive-api-docs.md534 name: "John Doe",CODE
LOW…/code-documenter/references/api-docs-fastapi-django.md16 name: str = Field(..., min_length=1, max_length=100, example="John Doe")CODE
LOWskills/idor-testing/SKILL.md275 "street": "123 Main St",CODE
LOWskills/typescript-pro/references/type-guards.md270const email: Email = createEmail("user@example.com")CODE
LOW…lls/playwright/playwright-cli/tracing-and-debugging.md227playwright-cli fill e1 "Jane Doe"CODE
LOW…lls/playwright/playwright-cli/tracing-and-debugging.md388playwright-cli fill e1 "user@example.com"CODE
LOWskills/playwright/playwright-cli/storage-and-auth.md99playwright-cli fill e1 "admin@example.com"CODE
LOWskills/playwright/playwright-cli/storage-and-auth.md131playwright-cli fill e1 "admin@example.com"CODE
LOWskills/playwright/playwright-cli/storage-and-auth.md138playwright-cli fill e1 "user@example.com"CODE
LOWskills/playwright/playwright-cli/storage-and-auth.md332 localStorage.setItem('user_name', 'Jane Doe');CODE
LOWskills/playwright/playwright-cli/test-generation.md12playwright-cli fill e1 "user@example.com"CODE
LOWskills/playwright/playwright-cli/test-generation.md13# Output: await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com');COMMENT
LOWskills/playwright/playwright-cli/test-generation.md49playwright-cli fill e1 "user@example.com"CODE
LOWskills/playwright/playwright-cli/test-generation.md51# await page.getByRole('textbox', { name: 'Email' }).fill('user@example.com');COMMENT
LOWskills/playwright/playwright-cli/test-generation.md71 await page.getByRole("textbox", { name: "Email" }).fill("user@example.com")CODE
LOWskills/playwright/playwright-cli/test-generation.md86 await page.getByRole("textbox", { name: "Email" }).fill("user@example.com")CODE
LOW⚡skills/playwright/playwright-cli/test-generation.md130playwright-cli fill e1 "Jane Doe"CODE
LOW⚡skills/playwright/playwright-cli/test-generation.md131# await page.getByRole('textbox', { name: 'Full Name' }).fill('Jane Doe');COMMENT
LOW⚡skills/playwright/playwright-cli/test-generation.md132playwright-cli fill e2 "123 Main St"CODE
LOW⚡skills/playwright/playwright-cli/test-generation.md133# await page.getByRole('textbox', { name: 'Address' }).fill('123 Main St');COMMENT
LOWskills/playwright/playwright-cli/test-generation.md150playwright-cli fill e1 "Acme Corp"CODE
LOWskills/playwright/playwright-cli/test-generation.md239 await page.getByRole("textbox", { name: "Full Name" }).fill("Jane Doe")CODE
LOWskills/playwright/playwright-cli/test-generation.md240 await page.getByRole("textbox", { name: "Address" }).fill("123 Main St")CODE
LOWskills/playwright/playwright-cli/test-generation.md302 name: "Jane Doe",CODE
LOWskills/playwright/playwright-cli/advanced-workflows.md66 await popup.fill('input[name=email]', 'user@example.com');CODE
LOW⚡skills/playwright/playwright-cli/advanced-workflows.md416playwright-cli fill e1 "123 Main Street"CODE
LOWskills/playwright/playwright-cli/advanced-workflows.md450 await page.fill('#company-name', 'Acme Corp');CODE
LOWskills/playwright/playwright-cli/advanced-workflows.md455 await page.fill('#contact-name', 'Jane Doe');CODE
LOWskills/playwright/playwright-cli/running-custom-code.md465 await page.fill('input[name=email]', 'user@example.com');CODE
LOW⚡skills/playwright/playwright-cli/running-custom-code.md507 await page.fill('#street', '123 Main St');CODE
LOWskills/playwright/playwright-cli/core-commands.md11playwright-cli fill e1 "user@example.com" # Fill an input fieldCODE
LOWskills/playwright/playwright-cli/core-commands.md35playwright-cli fill e1 "user@example.com"CODE
LOWskills/playwright/playwright-cli/core-commands.md145playwright-cli fill e5 "user@example.com"CODE
LOWskills/playwright/playwright-cli/core-commands.md309playwright-cli fill e1 "admin@example.com"CODE
LOWskills/playwright/playwright-cli/core-commands.md324playwright-cli fill e1 "Jane Doe"CODE
LOWskills/playwright/playwright-cli/session-management.md14playwright-cli -s=auth fill e1 "user@example.com"CODE
LOWskills/playwright/playwright-cli/session-management.md75playwright-cli -s=admin fill e1 "admin@example.com"CODE
LOWskills/playwright/playwright-cli/session-management.md277playwright-cli -s=login fill e1 "user@example.com"CODE
LOWskills/playwright/pom/pom-vs-fixtures-vs-helpers.md829 await login.emailInput.fill("user@example.com")CODE
LOW⚡skills/playwright/core/forms-and-validation.md420 await page.getByLabel("Address").fill("123 Main St")CODE
LOWskills/playwright/core/forms-and-validation.md10await page.getByLabel("Name").fill("Jane Doe")CODE
LOWskills/playwright/core/forms-and-validation.md215 await page.getByLabel("Name").fill("Jane Doe")CODE
LOWskills/playwright/core/forms-and-validation.md260 await page.getByLabel("Name").fill("Jane Doe")CODE
LOWskills/playwright/core/forms-and-validation.md444 await expect(page.getByText("123 Main St")).toBeVisible()CODE
LOWskills/playwright/core/forms-and-validation.md469 await page.getByLabel("Address").fill("123 Main St")CODE
LOWskills/playwright/core/forms-and-validation.md479 await expect(page.getByLabel("Address")).toHaveValue("123 Main St")CODE
LOWskills/playwright/core/forms-and-validation.md495 await page.getByLabel("Address").fill("123 Main St")CODE
LOWskills/playwright/core/forms-and-validation.md516 await expect(page.getByText("123 Main St")).toBeVisible()CODE
LOWskills/playwright/core/forms-and-validation.md537 await page.getByLabel("Address").fill("123 Main St")CODE
143 more matches not shown…
Empty Error Handlers9 hits · 45 pts
SeverityFileLineSnippetContext
HIGHskills/code-to-diagram/scripts/analyze_codebase.py391except OSError:CODE
HIGHskills/audit-flow/scripts/audit.py981except (ValueError, TypeError):CODE
HIGHskills/http-load-profiler/scripts/http_benchmark.py160except (IOError, OSError):CODE
HIGHskills/http-load-profiler/scripts/http_benchmark.py224except OSError:CODE
HIGH…/dataset-quality-audit/scripts/data_quality_checker.py580except Exception:CODE
HIGH…/dataset-quality-audit/scripts/data_quality_checker.py240except (ValueError, TypeError):CODE
HIGH…/dataset-quality-audit/scripts/data_quality_checker.py163except (ValueError, TypeError):CODE
HIGHskills/log-error-digest/scripts/analyze_logs.py179except ValueError:CODE
HIGHskills/log-error-digest/scripts/analyze_logs.py88except json.JSONDecodeError:CODE
Excessive Try-Catch Wrapping31 hits · 44 pts
SeverityFileLineSnippetContext
MEDIUMREADME.md2563 print(f"Error: Invalid JSON input: {e}", file=sys.stderr)CODE
MEDIUMREADME.md2602 print(f"Error: Invalid JSON input: {e}", file=sys.stderr)CODE
MEDIUMREADME.md2651 print(f"Error: Invalid JSON input: {e}", file=sys.stderr)CODE
MEDIUMskills/code-to-diagram/scripts/analyze_codebase.py442 print(f"Error: '{args.directory}' is not a valid directory", file=sys.stderr)CODE
LOWskills/sql-insight/scripts/sql_query_helper.py945 except Exception as e:CODE
MEDIUM⚡skills/timeline-builder/scripts/generate_timeline.py600 print(f"Error: config file not found: {args.config}", file=sys.stderr)STRING
MEDIUM⚡skills/timeline-builder/scripts/generate_timeline.py603 print(f"Error: invalid JSON - {e}", file=sys.stderr)STRING
MEDIUM⚡skills/timeline-builder/scripts/generate_timeline.py607 print("Error: no events in config", file=sys.stderr)STRING
MEDIUMskills/code-vuln-audit/scripts/security_scan.py846 print(f"Error: '{args.target}' is not a directory", file=sys.stderr)STRING
LOWskills/ssh-penetration-testing/SKILL.md349 except Exception as e:CODE
MEDIUM⚡skills/audit-flow/scripts/audit.py1029 print(f"Error: Ours CSV directory not found at {ours_dir}", file=sys.stderr)CODE
MEDIUM⚡skills/audit-flow/scripts/audit.py1034 print(f"Error: Theirs directory not found at {theirs_dir}", file=sys.stderr)CODE
MEDIUMskills/audit-flow/scripts/audit.py111 print(f"Error: Database not found at {DB_PATH}", file=sys.stderr)CODE
MEDIUMskills/audit-flow/scripts/audit.py935 print(f"Error: CSV directory not found at {CSV_DIR}", file=sys.stderr)CODE
MEDIUMskills/audit-flow/scripts/audit.py943 print(f"Error: Missing CSV file: {csv_path}", file=sys.stderr)CODE
MEDIUMskills/audit-flow/scripts/audit.py1518 print(f"Error: ours DB not found: {ours_path}", file=sys.stderr)CODE
MEDIUMskills/audit-flow/scripts/audit.py1521 print(f"Error: theirs DB not found: {theirs_path}", file=sys.stderr)CODE
MEDIUMskills/audit-flow/scripts/audit.py1570 print("Error: not in a git repository", file=sys.stderr)CODE
LOWskills/pdf/reference.md503 except Exception as e:CODE
LOWskills/pdf/reference.md523 except Exception as e:CODE
LOWskills/pdf/reference.md604except Exception as e:CODE
LOWskills/database-scout/scripts/db_explorer.py464 except Exception as e:CODE
MEDIUMskills/shodan-reconnaissance/SKILL.md472 print(f"Error: {e}")CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py580 except Exception:CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py648 except Exception as e:CODE
LOWskills/html-injection-testing/SKILL.md393 except Exception as e:CODE
LOW…ills/regression-modeler/scripts/regression_analyzer.py49 except Exception:CODE
LOW…ills/regression-modeler/scripts/regression_analyzer.py244 except Exception as e:CODE
LOW…ills/regression-modeler/scripts/regression_analyzer.py308 except Exception as e:CODE
LOW…ills/regression-modeler/scripts/regression_analyzer.py333 except Exception:CODE
MEDIUMskills/route-to-openapi/scripts/generate_api_doc.py606 print(f"Error: '{source_dir}' is not a directory.", file=sys.stderr)CODE
Magic Placeholder Names7 hits · 35 pts
SeverityFileLineSnippetContext
HIGHskills/dev-guide-generator/SKILL.md112 - When configuration files are involved, use placeholders (e.g., `YOUR_API_KEY`) and explain how to obtain the real vCODE
HIGH…ls/code-documenter/references/documentation-systems.md40 apiKey: "YOUR_API_KEY",CODE
HIGH…ls/code-documenter/references/documentation-systems.md201 apiKey: 'YOUR_API_KEY',CODE
HIGHskills/shodan-reconnaissance/SKILL.md51shodan init YOUR_API_KEYCODE
HIGHskills/shodan-reconnaissance/SKILL.md279api = shodan.Shodan('YOUR_API_KEY')CODE
HIGHskills/shodan-reconnaissance/SKILL.md440API_KEY = 'YOUR_API_KEY'CODE
HIGHskills/shodan-reconnaissance/SKILL.md498| No API Key Configured | Key not initialized | Run `shodan init YOUR_API_KEY` then verify with `shodan info` |CODE
Deep Nesting38 hits · 34 pts
SeverityFileLineSnippetContext
LOWskills/code-to-diagram/scripts/analyze_codebase.py169CODE
LOWskills/code-to-diagram/scripts/analyze_codebase.py320CODE
LOWskills/code-to-diagram/scripts/analyze_codebase.py33CODE
LOWskills/sql-insight/scripts/sql_query_helper.py869CODE
LOWskills/code-vuln-audit/scripts/security_scan.py582CODE
LOWskills/code-vuln-audit/scripts/security_scan.py637CODE
LOWskills/audit-flow/scripts/audit.py508CODE
LOWskills/audit-flow/scripts/audit.py602CODE
LOWskills/audit-flow/scripts/audit.py666CODE
LOWskills/audit-flow/scripts/audit.py907CODE
LOWskills/audit-flow/scripts/audit.py932CODE
LOWskills/audit-flow/scripts/audit.py1015CODE
LOWskills/audit-flow/scripts/audit.py1304CODE
LOWskills/audit-flow/scripts/audit.py1618CODE
LOWskills/audit-flow/scripts/audit.py1210CODE
LOWskills/pdf/scripts/fill_fillable_fields.py11CODE
LOWskills/pdf/scripts/fill_fillable_fields.py55CODE
LOWskills/pdf/scripts/extract_form_field_info.py19CODE
LOWskills/pdf/scripts/extract_form_field_info.py47CODE
LOWskills/pdf/scripts/extract_form_structure.py20CODE
LOWskills/pdf/scripts/check_bounding_boxes.py15CODE
LOWskills/http-load-profiler/scripts/http_benchmark.py97CODE
LOWskills/http-load-profiler/scripts/http_benchmark.py328CODE
LOWskills/database-scout/scripts/db_explorer.py424CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py43CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py62CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py78CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py138CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py248CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py299CODE
LOW…/dataset-quality-audit/scripts/data_quality_checker.py530CODE
LOW…ills/regression-modeler/scripts/regression_analyzer.py20CODE
LOW…ills/regression-modeler/scripts/regression_analyzer.py54CODE
LOWskills/route-to-openapi/scripts/generate_api_doc.py44CODE
LOWskills/route-to-openapi/scripts/generate_api_doc.py641CODE
LOWskills/route-to-openapi/scripts/generate_api_doc.py162CODE
LOWskills/route-to-openapi/scripts/generate_api_doc.py200CODE
LOWskills/data-viz-renderer/scripts/build_infographic.py602CODE
Modern AI Meta-Vocabulary8 hits · 17 pts
SeverityFileLineSnippetContext
MEDIUMCHANGELOG.md4060- Changed `/review <pr>` back to a fast single-pass review; use `/code-review <level> <pr#>` for the multi-agent review CODE
MEDIUMREADME.md273export CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1 # Opt out of enforcing the assumed context window for unknCODE
MEDIUMREADME.md563claude --max-turns 3 -p "query" # Limit agentic turns (print mode only)CODE
MEDIUMREADME.md583/workflows # View dynamic workflows and background orchestrationCODE
MEDIUMREADME.md730/effort xhigh # Strong default for difficult coding and agentic work where supportedCODE
MEDIUMREADME.md732/effort ultracode # Session-only xhigh plus dynamic workflow orchestration, where availableCODE
MEDIUMREADME.md1280# Optional: scaffold a personal skills-directory plugin (a separate layout)COMMENT
MEDIUMskills/playwright/core/configuration.md8npx playwright init # scaffold config + first testCODE
Hyper-Verbose Identifiers12 hits · 12 pts
SeverityFileLineSnippetContext
LOW⚡skills/code-to-diagram/scripts/analyze_codebase.py219def generate_architecture_diagram(CODE
LOWskills/pdf/scripts/fill_fillable_fields.py55def validation_error_for_field_value(field_info, field_value):CODE
LOWskills/pdf/scripts/extract_form_field_info.py9def get_full_annotation_field_id(annotation):CODE
LOWskills/pdf/scripts/check_bounding_boxes.py15def get_bounding_box_messages(fields_json_stream) -> list[str]:CODE
LOWskills/pdf/scripts/fill_pdf_form_with_annotations.py10def transform_from_image_coords(bbox, image_width, image_height, pdf_width, pdf_height):CODE
LOWskills/pdf/scripts/fill_pdf_form_with_annotations.py23def transform_from_pdf_coords(bbox, pdf_height):CODE
LOWskills/test-suite-architect/scripts/init_qa_project.py21def create_directory_structure(base_path):CODE
LOWskills/test-suite-architect/scripts/init_qa_project.py35def create_test_execution_tracking(base_path, project_name):CODE
LOWskills/test-suite-architect/scripts/init_qa_project.py58def create_bug_tracking_template(base_path):CODE
LOWskills/test-suite-architect/scripts/init_qa_project.py179def create_weekly_report_template(base_path):STRING
LOWskills/caching/SKILL.md62export function getOrSet<T>(key: string, ttlMs: number, compute: () => T): T {CODE
LOWskills/log-error-digest/scripts/analyze_logs.py275def compute_time_distribution(entries: list[dict]) -> tuple:CODE
Docstring Block Structure2 hits · 10 pts
SeverityFileLineSnippetContext
HIGHskills/code-documenter/references/python-docstrings.md7Calculate total cost including tax. Args: items: List of items to calculate total for. tax_rate: TaSTRING
HIGH…/code-documenter/references/api-docs-fastapi-django.md34Create a new user account. Args: user: User creation data including name and email. Returns: CSTRING
Over-Commented Block4 hits · 4 pts
SeverityFileLineSnippetContext
LOWskills/scanning-tools/SKILL.md501COMMENT
LOWskills/playwright/playwright-cli/test-generation.md41COMMENT
LOWskills/windows-privilege-escalation/SKILL.md241# Install (runs as SYSTEM)COMMENT
LOWskills/shodan-reconnaissance/SKILL.md81# Country: AustraliaCOMMENT
Unused Imports5 hits · 4 pts
SeverityFileLineSnippetContext
LOWskills/audit-flow/scripts/audit.py20CODE
LOWskills/audit-flow/scripts/audit.py25CODE
LOWskills/localization-toolkit/scripts/i18n_audit.py8CODE
LOWskills/test-suite-architect/scripts/init_qa_project.py15CODE
LOWskills/route-to-openapi/scripts/generate_api_doc.py12CODE
Redundant / Tautological Comments2 hits · 3 pts
SeverityFileLineSnippetContext
LOW.github/workflows/sync-release-notes.yml136 # Check if file needs updatingCOMMENT
LOW.github/workflows/sync-release-notes.yml235 # Check if there are changes to commitCOMMENT
AI Slop Vocabulary1 hit · 1 pts
SeverityFileLineSnippetContext
MEDIUM…ills/test-suite-architect/scripts/calculate_metrics.py17 """Calculate comprehensive QA metrics from tracking CSV."""STRING