Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

sevnightingale/plutus-agent

https://github.com/sevnightingale/plutus-agent · scanned 2026-06-16 00:08 UTC (2 months, 2 weeks ago)

356 raw signals (0 security + 356 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 335 actionable findings from 1 signal source. 21 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 335 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 27 Medium 17 Low 192 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 335 Crowd 0 Layer: Software 24 Frontend 2 Hardware 1 Security 30 Cicd 1 Quality 227 Api 50

Exclude dismissed / FP Exclude test files

All 24398 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_load_optional_dependencies`	software	healthy	`tests/test_project_metadata.py:7`
`test_messaging_extra_includes_qrcode_for_weixin_setup`	software	healthy	`tests/test_project_metadata.py:16`
`_run_handle_function_call`	software	healthy	`tests/test_transform_tool_result_hook.py:20`
`test_result_unchanged_when_no_hook_registered`	software	healthy	`tests/test_transform_tool_result_hook.py:52`
`test_result_unchanged_for_none_hook_return`	software	healthy	`tests/test_transform_tool_result_hook.py:62`
`test_result_ignores_non_string_hook_returns`	software	healthy	`tests/test_transform_tool_result_hook.py:70`
`test_first_valid_string_return_replaces_result`	software	healthy	`tests/test_transform_tool_result_hook.py:78`
`test_hook_receives_expected_kwargs`	software	healthy	`tests/test_transform_tool_result_hook.py:86`
`_hook`	software	healthy	`tests/test_transform_tool_result_hook.py:140`
`test_hook_exception_falls_back_to_original`	software	healthy	`tests/test_transform_tool_result_hook.py:110`
`_raise`	software	healthy	`tests/test_transform_tool_result_hook.py:111`
`test_post_tool_call_remains_observational`	software	healthy	`tests/test_transform_tool_result_hook.py:121`
`test_transform_tool_result_runs_after_post_tool_call`	software	healthy	`tests/test_transform_tool_result_hook.py:136`
`test_transform_tool_result_integration_with_real_plugin`	software	healthy	`tests/test_transform_tool_result_hook.py:162`
`test_session_cols_no_injection_chars`	software	healthy	`tests/test_sql_injection.py:8`
`test_get_sessions_all_query_is_parameterized`	software	healthy	`tests/test_sql_injection.py:17`
`test_get_sessions_with_source_query_is_parameterized`	software	healthy	`tests/test_sql_injection.py:26`
`test_session_col_names_are_safe_identifiers`	software	healthy	`tests/test_sql_injection.py:35`
`_looks_like_credential`	software	healthy	`tests/conftest.py:153`
`_sys_modules_hygiene`	software	healthy	`tests/conftest.py:227`
`_ours`	software	healthy	`tests/conftest.py:255`
`_hermetic_environment`	software	healthy	`tests/conftest.py:286`
`_isolate_hermes_home`	software	healthy	`tests/conftest.py:349`
`_reset_module_state`	software	healthy	`tests/conftest.py:371`
`tmp_dir`	software	healthy	`tests/conftest.py:456`
`mock_config`	software	healthy	`tests/conftest.py:462`
`_timeout_handler`	software	healthy	`tests/conftest.py:484`
`_ensure_current_event_loop`	software	healthy	`tests/conftest.py:488`
`_enforce_test_timeout`	software	healthy	`tests/conftest.py:521`
`test_no_hermes_home_returns_native`	software	healthy	`tests/test_constants.py:16`
`test_hermes_home_is_native`	software	healthy	`tests/test_constants.py:23`
`test_hermes_home_is_profile`	software	healthy	`tests/test_constants.py:31`
`test_hermes_home_is_docker`	software	healthy	`tests/test_constants.py:40`
`test_hermes_home_is_custom_path`	software	healthy	`tests/test_constants.py:48`
`test_docker_profile_active`	software	healthy	`tests/test_constants.py:56`
`_reset_cache`	software	healthy	`tests/test_constants.py:70`
`test_detects_dockerenv`	software	healthy	`tests/test_constants.py:74`
`test_detects_containerenv`	software	healthy	`tests/test_constants.py:80`
`test_detects_cgroup_docker`	software	healthy	`tests/test_constants.py:86`
`test_negative_case`	software	healthy	`tests/test_constants.py:97`
`test_caches_result`	software	healthy	`tests/test_constants.py:108`
`test_agent_loop_tool_returns_error`	software	healthy	`tests/test_model_tools.py:23`
`test_unknown_tool_returns_error`	software	healthy	`tests/test_model_tools.py:29`
`test_exception_returns_json_error`	software	healthy	`tests/test_model_tools.py:34`
`test_tool_hooks_receive_session_and_tool_call_ids`	software	healthy	`tests/test_model_tools.py:43`
`test_expected_tools_in_set`	software	healthy	`tests/test_model_tools.py:92`
`test_no_regular_tools_in_set`	software	healthy	`tests/test_model_tools.py:98`
`test_blocked_tool_returns_error_and_skips_dispatch`	software	healthy	`tests/test_model_tools.py:110`
`fake_invoke_hook`	software	healthy	`tests/test_model_tools.py:171`
`fake_dispatch`	software	healthy	`tests/test_model_tools.py:119`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`TestGetDefaultHermesRoot`	software	healthy	`tests/test_constants.py:13`
`TestIsContainer`	software	healthy	`tests/test_constants.py:67`
`TestHandleFunctionCall`	software	healthy	`tests/test_model_tools.py:22`
`TestAgentLoopTools`	software	healthy	`tests/test_model_tools.py:91`
`TestPreToolCallBlocking`	software	healthy	`tests/test_model_tools.py:107`
`TestLegacyToolsetMap`	software	healthy	`tests/test_model_tools.py:192`
`TestBackwardCompat`	software	healthy	`tests/test_model_tools.py:213`
`TestNonFileInputs`	software	healthy	`tests/test_cli_file_drop.py:45`
`TestImageFileDrop`	software	healthy	`tests/test_cli_file_drop.py:76`
`TestNonImageFileDrop`	software	healthy	`tests/test_cli_file_drop.py:113`
`TestEscapedSpaces`	software	healthy	`tests/test_cli_file_drop.py:133`
`TestEdgeCases`	software	healthy	`tests/test_cli_file_drop.py:176`
`_Response`	software	healthy	`tests/test_account_usage.py:11`
`_Client`	software	healthy	`tests/test_account_usage.py:24`
`_RoutingClient`	software	healthy	`tests/test_account_usage.py:38`
`TestMiniMaxModelValidation`	software	healthy	`tests/test_minimax_model_validation.py:14`
`TestMiniMaxCatalogPathRequired`	software	healthy	`tests/test_minimax_model_validation.py:102`
`TestGetSubprocessHome`	software	healthy	`tests/test_subprocess_home_isolation.py:21`
`TestMakeRunEnvHomeInjection`	software	healthy	`tests/test_subprocess_home_isolation.py:80`
`TestSanitizeSubprocessEnvHomeInjection`	software	healthy	`tests/test_subprocess_home_isolation.py:124`
`TestProfileBootstrap`	software	healthy	`tests/test_subprocess_home_isolation.py:155`
`TestPythonProcessUnchanged`	software	healthy	`tests/test_subprocess_home_isolation.py:178`
`TestParseQualifiedName`	software	healthy	`tests/test_plugin_skills.py:21`
`TestIsValidNamespace`	software	healthy	`tests/test_plugin_skills.py:51`
`TestPluginSkillRegistry`	software	healthy	`tests/test_plugin_skills.py:73`
`TestPluginContextRegisterSkill`	software	healthy	`tests/test_plugin_skills.py:122`
`TestSkillViewQualifiedName`	software	healthy	`tests/test_plugin_skills.py:166`
`TestSkillViewPluginGuards`	software	healthy	`tests/test_plugin_skills.py:256`
`TestBundleContextBanner`	software	healthy	`tests/test_plugin_skills.py:315`
`TestGetToolset`	software	healthy	`tests/test_toolsets.py:29`
`TestResolveToolset`	software	healthy	`tests/test_toolsets.py:39`
`TestResolveMultipleToolsets`	software	healthy	`tests/test_toolsets.py:94`
`TestValidateToolset`	software	healthy	`tests/test_toolsets.py:107`
`TestGetToolsetInfo`	software	healthy	`tests/test_toolsets.py:136`
`TestCreateCustomToolset`	software	healthy	`tests/test_toolsets.py:152`
`TestRegistryOwnedToolsets`	software	healthy	`tests/test_toolsets.py:169`
`TestToolsetConsistency`	software	healthy	`tests/test_toolsets.py:186`
`TestPluginToolsets`	software	healthy	`tests/test_toolsets.py:228`
`TestRunAsyncLoopLifecycle`	software	healthy	`tests/test_model_tools_async_bridge.py:47`
`TestRunAsyncWorkerThread`	software	healthy	`tests/test_model_tools_async_bridge.py:87`
`TestRunAsyncWithRunningLoop`	software	healthy	`tests/test_model_tools_async_bridge.py:183`
`TimeoutFuture`	software	healthy	`tests/test_model_tools_async_bridge.py:218`
`FakeExecutor`	software	healthy	`tests/test_model_tools_async_bridge.py:227`
`TestVisionDispatchLoopSafety`	software	healthy	`tests/test_model_tools_async_bridge.py:274`
`_RecordingRandom`	software	healthy	`tests/test_retry_utils.py:85`
`TestQueryOllamaNumCtx`	software	healthy	`tests/test_ollama_num_ctx.py:32`
`TestGetDefaultModelForProvider`	software	healthy	`tests/test_empty_model_fallback.py:7`
`TestGatewayEmptyModelFallback`	software	healthy	`tests/test_empty_model_fallback.py:35`
`TestResolveGatewayModel`	software	healthy	`tests/test_empty_model_fallback.py:99`
`TestApplyIPv4Preference`	software	healthy	`tests/test_ipv4_preference.py:17`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`ecosystem.config.js`	software	healthy	`ecosystem.config.js`
`LINEAGE.md`	software	healthy	`LINEAGE.md`
`ARCHITECTURE.md`	software	healthy	`ARCHITECTURE.md`
`README.md`	software	healthy	`README.md`
`package.json`	software	healthy	`package.json`
`TRADING.md`	software	healthy	`TRADING.md`
`package-lock.json`	software	healthy	`package-lock.json`
`.env.example`	software	healthy	`.env.example`
`pyproject.toml`	software	healthy	`pyproject.toml`
`LICENSE`	software	healthy	`LICENSE`
`SECURITY.md`	software	healthy	`SECURITY.md`
`setup-hermes.sh`	software	healthy	`setup-hermes.sh`
`SETUP.md`	software	healthy	`SETUP.md`
`test_project_metadata.py`	software	healthy	`tests/test_project_metadata.py`
`test_transform_tool_result_hook.py`	software	healthy	`tests/test_transform_tool_result_hook.py`
`test_sql_injection.py`	software	healthy	`tests/test_sql_injection.py`
`__init__.py`	software	healthy	`tests/__init__.py`
`conftest.py`	software	healthy	`tests/conftest.py`
`test_constants.py`	software	healthy	`tests/test_constants.py`
`test_model_tools.py`	software	healthy	`tests/test_model_tools.py`
`test_cli_file_drop.py`	software	healthy	`tests/test_cli_file_drop.py`
`run_interrupt_test.py`	software	healthy	`tests/run_interrupt_test.py`
`test_account_usage.py`	software	healthy	`tests/test_account_usage.py`
`test_minimax_model_validation.py`	software	healthy	`tests/test_minimax_model_validation.py`
`test_utils_truthy_values.py`	software	healthy	`tests/test_utils_truthy_values.py`
`test_subprocess_home_isolation.py`	software	healthy	`tests/test_subprocess_home_isolation.py`
`test_plugin_skills.py`	software	healthy	`tests/test_plugin_skills.py`
`test_toolsets.py`	software	healthy	`tests/test_toolsets.py`
`test_model_tools_async_bridge.py`	software	healthy	`tests/test_model_tools_async_bridge.py`
`test_retry_utils.py`	software	healthy	`tests/test_retry_utils.py`
`test_ollama_num_ctx.py`	software	healthy	`tests/test_ollama_num_ctx.py`
`test_empty_model_fallback.py`	software	healthy	`tests/test_empty_model_fallback.py`
`test_ipv4_preference.py`	software	healthy	`tests/test_ipv4_preference.py`
`test_ctx_halving_fix.py`	software	healthy	`tests/test_ctx_halving_fix.py`
`test_packaging_metadata.py`	software	healthy	`tests/test_packaging_metadata.py`
`test_cli_skin_integration.py`	software	healthy	`tests/test_cli_skin_integration.py`
`test_minisweagent_path.py`	software	healthy	`tests/test_minisweagent_path.py`
`test_logging.py`	software	healthy	`tests/test_logging.py`
`test_base_url_hostname.py`	software	healthy	`tests/test_base_url_hostname.py`
`test_model_picker_scroll.py`	software	healthy	`tests/test_model_picker_scroll.py`
`test_state.py`	software	healthy	`tests/test_state.py`
`test_timezone.py`	software	healthy	`tests/test_timezone.py`
`__init__.py`	software	healthy	`tests/integration/__init__.py`
`test_checkpoint_resumption.py`	software	healthy	`tests/integration/test_checkpoint_resumption.py`
`test_modal_terminal.py`	software	healthy	`tests/integration/test_modal_terminal.py`
`test_voice_channel_flow.py`	software	healthy	`tests/integration/test_voice_channel_flow.py`
`test_daytona_terminal.py`	software	healthy	`tests/integration/test_daytona_terminal.py`
`test_web_tools.py`	software	healthy	`tests/integration/test_web_tools.py`
`__init__.py`	software	healthy	`tests/watchers/__init__.py`
`test_poller.py`	software	healthy	`tests/watchers/test_poller.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`integration`	software	healthy	`tests/integration`
`watchers`	software	healthy	`tests/watchers`
`cli`	software	healthy	`tests/cli`
`agent`	software	healthy	`tests/agent`
`transports`	software	healthy	`tests/agent/transports`
`fakes`	software	healthy	`tests/fakes`
`run_agent`	software	healthy	`tests/run_agent`
`cron`	software	healthy	`tests/cron`
`tools`	software	healthy	`tests/tools`
`integrations`	software	healthy	`tests/tools/integrations`
`dgclaw`	software	healthy	`tests/tools/integrations/dgclaw`
`hyperliquid`	software	healthy	`tests/tools/integrations/hyperliquid`
`acp`	software	healthy	`tests/tools/integrations/acp`
`dispatchers`	software	healthy	`tests/tools/dispatchers`
`core`	software	healthy	`tests/tools/core`
`gateway`	software	healthy	`tests/gateway`
`trading`	software	healthy	`tests/trading`
`e2e`	software	healthy	`tests/e2e`
`plugins`	software	healthy	`tests/plugins`
`plutus-trade-safety`	software	healthy	`tests/plugins/plutus-trade-safety`
`image_gen`	software	healthy	`tests/plugins/image_gen`
`harness`	software	healthy	`tests/harness`
`environments`	software	healthy	`tests/environments`
`benchmarks`	software	healthy	`tests/environments/benchmarks`
`docs`	software	healthy	`docs`
`legacy`	software	healthy	`docs/legacy`
`scripts`	software	healthy	`scripts`
`lib`	software	healthy	`scripts/lib`
`whatsapp-bridge`	software	healthy	`scripts/whatsapp-bridge`
`agents`	software	healthy	`agents`
`plutus-ops`	software	healthy	`agents/plutus-ops`
`plutus-reflect`	software	healthy	`agents/plutus-reflect`
`plutus-regime`	software	healthy	`agents/plutus-regime`
`plutus-trade`	software	healthy	`agents/plutus-trade`
`plutus-perception`	software	healthy	`agents/plutus-perception`
`plutus-predict`	software	healthy	`agents/plutus-predict`
`plutus-main`	software	healthy	`agents/plutus-main`
`skills`	software	healthy	`skills`
`dgclaw`	software	healthy	`skills/dgclaw`
`research`	software	healthy	`skills/research`
`polymarket`	software	healthy	`skills/research/polymarket`
`scripts`	software	healthy	`skills/research/polymarket/scripts`
`references`	software	healthy	`skills/research/polymarket/references`
`software-development`	software	healthy	`skills/software-development`
`requesting-code-review`	software	healthy	`skills/software-development/requesting-code-review`
`test-driven-development`	software	healthy	`skills/software-development/test-driven-development`
`writing-plans`	software	healthy	`skills/software-development/writing-plans`
`systematic-debugging`	software	healthy	`skills/software-development/systematic-debugging`
`plan`	software	healthy	`skills/software-development/plan`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GET /api/status`	api	healthy	`harness/cli/web_server.py`
`POST /api/gateway/restart`	api	healthy	`harness/cli/web_server.py`
`POST /api/hermes/update`	api	healthy	`harness/cli/web_server.py`
`GET /api/actions/{name}/status`	api	healthy	`harness/cli/web_server.py`
`GET /api/sessions`	api	healthy	`harness/cli/web_server.py`
`GET /api/sessions/search`	api	healthy	`harness/cli/web_server.py`
`GET /api/config`	api	healthy	`harness/cli/web_server.py`
`GET /api/config/defaults`	api	healthy	`harness/cli/web_server.py`
`GET /api/config/schema`	api	healthy	`harness/cli/web_server.py`
`GET /api/model/info`	api	healthy	`harness/cli/web_server.py`
`PUT /api/config`	api	healthy	`harness/cli/web_server.py`
`GET /api/env`	api	healthy	`harness/cli/web_server.py`
`PUT /api/env`	api	healthy	`harness/cli/web_server.py`
`DELETE /api/env`	api	healthy	`harness/cli/web_server.py`
`POST /api/env/reveal`	api	healthy	`harness/cli/web_server.py`
`GET /api/providers/oauth`	api	healthy	`harness/cli/web_server.py`
`DELETE /api/providers/oauth/{provider_id}`	api	healthy	`harness/cli/web_server.py`
`POST /api/providers/oauth/{provider_id}/start`	api	healthy	`harness/cli/web_server.py`
`POST /api/providers/oauth/{provider_id}/submit`	api	healthy	`harness/cli/web_server.py`
`GET /api/providers/oauth/{provider_id}/poll/{session_id}`	api	healthy	`harness/cli/web_server.py`
`DELETE /api/providers/oauth/sessions/{session_id}`	api	healthy	`harness/cli/web_server.py`
`GET /api/sessions/{session_id}`	api	healthy	`harness/cli/web_server.py`
`GET /api/sessions/{session_id}/messages`	api	healthy	`harness/cli/web_server.py`
`DELETE /api/sessions/{session_id}`	api	healthy	`harness/cli/web_server.py`
`GET /api/logs`	api	healthy	`harness/cli/web_server.py`
`GET /api/cron/jobs`	api	healthy	`harness/cli/web_server.py`
`GET /api/cron/jobs/{job_id}`	api	healthy	`harness/cli/web_server.py`
`POST /api/cron/jobs`	api	healthy	`harness/cli/web_server.py`
`PUT /api/cron/jobs/{job_id}`	api	healthy	`harness/cli/web_server.py`
`POST /api/cron/jobs/{job_id}/pause`	api	healthy	`harness/cli/web_server.py`
`POST /api/cron/jobs/{job_id}/resume`	api	healthy	`harness/cli/web_server.py`
`POST /api/cron/jobs/{job_id}/trigger`	api	healthy	`harness/cli/web_server.py`
`DELETE /api/cron/jobs/{job_id}`	api	healthy	`harness/cli/web_server.py`
`GET /api/skills`	api	healthy	`harness/cli/web_server.py`
`PUT /api/skills/toggle`	api	healthy	`harness/cli/web_server.py`
`GET /api/tools/toolsets`	api	healthy	`harness/cli/web_server.py`
`GET /api/config/raw`	api	healthy	`harness/cli/web_server.py`
`PUT /api/config/raw`	api	healthy	`harness/cli/web_server.py`
`GET /api/analytics/usage`	api	healthy	`harness/cli/web_server.py`
`GET /{full_path:path}`	api	healthy	`harness/cli/web_server.py`
`GET /api/dashboard/themes`	api	healthy	`harness/cli/web_server.py`
`PUT /api/dashboard/theme`	api	healthy	`harness/cli/web_server.py`
`GET /api/dashboard/plugins`	api	healthy	`harness/cli/web_server.py`
`GET /api/dashboard/plugins/rescan`	api	healthy	`harness/cli/web_server.py`
`GET /dashboard-plugins/{plugin_name}/{file_path:path}`	api	healthy	`harness/cli/web_server.py`
`GET /messages`	api	healthy	`scripts/whatsapp-bridge/bridge.js`
`POST /send`	api	healthy	`scripts/whatsapp-bridge/bridge.js`
`POST /edit`	api	healthy	`scripts/whatsapp-bridge/bridge.js`
`POST /send-media`	api	healthy	`scripts/whatsapp-bridge/bridge.js`
`POST /typing`	api	healthy	`scripts/whatsapp-bridge/bridge.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::tests/cli/test_codex_cli_model_picker.py`	security	healthy	`tests/cli/test_codex_cli_model_picker.py`
`auth::harness/cli/tips.py`	security	healthy	`harness/cli/tips.py`
`auth::harness/tools/mcp_tool.py`	security	healthy	`harness/tools/mcp_tool.py`
`auth::tests/plugins/image_gen/test_openai_codex_provider.py`	security	healthy	`tests/plugins/image_gen/test_openai_codex_provider.py`
`auth::trading/integrations/acp/_cli.py`	security	healthy	`trading/integrations/acp/_cli.py`
`auth::harness/agent/model_metadata.py`	security	healthy	`harness/agent/model_metadata.py`
`auth::tests/cli/test_setup.py`	security	healthy	`tests/cli/test_setup.py`
`auth::tests/cli/test_api_key_providers.py`	security	healthy	`tests/cli/test_api_key_providers.py`
`auth::harness/cli/auth.py`	security	healthy	`harness/cli/auth.py`
`auth::harness/cli/web_server.py`	security	healthy	`harness/cli/web_server.py`
`auth::harness/agent/google_oauth.py`	security	healthy	`harness/agent/google_oauth.py`
`auth::tests/tools/test_config_null_guard.py`	security	healthy	`tests/tools/test_config_null_guard.py`
`auth::tests/run_agent/test_anthropic_third_party_oauth_guar…`	security	healthy	`tests/run_agent/test_anthropic_third_party_oauth_guard.py`
`auth::harness/cli/setup.py`	security	healthy	`harness/cli/setup.py`
`auth::tests/tools/test_credential_files.py`	security	healthy	`tests/tools/test_credential_files.py`
`auth::tests/cli/test_auth_qwen_provider.py`	security	healthy	`tests/cli/test_auth_qwen_provider.py`
`auth::harness/cli/profiles.py`	security	healthy	`harness/cli/profiles.py`
`auth::harness/plugins/image_gen/openai-codex/plugin.yaml`	security	healthy	`harness/plugins/image_gen/openai-codex/plugin.yaml`
`auth::harness/cli/gateway.py`	security	healthy	`harness/cli/gateway.py`
`auth::harness/agent/account_usage.py`	security	healthy	`harness/agent/account_usage.py`
`auth::harness/plugins/image_gen/openai-codex/__init__.py`	security	healthy	`harness/plugins/image_gen/openai-codex/__init__.py`
`auth::README.md`	security	healthy	`README.md`
`auth::harness/agent/redact.py`	security	healthy	`harness/agent/redact.py`
`auth::tests/tools/test_mcp_oauth_cold_load_expiry.py`	security	healthy	`tests/tools/test_mcp_oauth_cold_load_expiry.py`
`auth::harness/cli/config.py`	security	healthy	`harness/cli/config.py`
`auth::harness/cli/status.py`	security	healthy	`harness/cli/status.py`
`auth::harness/agent/credential_sources.py`	security	healthy	`harness/agent/credential_sources.py`
`auth::tests/agent/test_skill_commands.py`	security	healthy	`tests/agent/test_skill_commands.py`
`auth::harness/agent/anthropic_adapter.py`	security	healthy	`harness/agent/anthropic_adapter.py`
`auth::harness/agent/auxiliary_client.py`	security	healthy	`harness/agent/auxiliary_client.py`
`auth::harness/gateway/run.py`	security	healthy	`harness/gateway/run.py`
`auth::tests/cli/test_mcp_config.py`	security	healthy	`tests/cli/test_mcp_config.py`
`auth::tests/tools/test_mcp_reconnect_signal.py`	security	healthy	`tests/tools/test_mcp_reconnect_signal.py`
`auth::harness/cli/providers.py`	security	healthy	`harness/cli/providers.py`
`auth::tests/agent/test_anthropic_adapter.py`	security	healthy	`tests/agent/test_anthropic_adapter.py`
`auth::harness/cli/model_normalize.py`	security	healthy	`harness/cli/model_normalize.py`
`auth::harness/tools/skills_hub.py`	security	healthy	`harness/tools/skills_hub.py`
`auth::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`auth::.env.example`	security	healthy	`.env.example`
`auth::trading/integrations/acp/identity.py`	security	healthy	`trading/integrations/acp/identity.py`
`auth::harness/agent/google_code_assist.py`	security	healthy	`harness/agent/google_code_assist.py`
`auth::harness/cli/mcp_config.py`	security	healthy	`harness/cli/mcp_config.py`
`auth::harness/cli/model_switch.py`	security	healthy	`harness/cli/model_switch.py`
`auth::harness/cli/copilot_auth.py`	security	healthy	`harness/cli/copilot_auth.py`
`auth::harness/cli/runtime_provider.py`	security	healthy	`harness/cli/runtime_provider.py`
`auth::harness/cli/auth_commands.py`	security	healthy	`harness/cli/auth_commands.py`
`auth::tests/cli/test_cli_plan_command.py`	security	healthy	`tests/cli/test_cli_plan_command.py`
`auth::tests/gateway/test_agent_cache.py`	security	healthy	`tests/gateway/test_agent_cache.py`
`auth::tests/agent/test_credential_pool.py`	security	healthy	`tests/agent/test_credential_pool.py`
`auth::tests/cli/test_gquota_command.py`	security	healthy	`tests/cli/test_gquota_command.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`192.168.1.100`	network	healthy	`.env.example`
`169.254.169.254`	network	healthy	`tests/conftest.py`
`93.184.216.34`	network	healthy	`tests/test_ipv4_preference.py`
`127.0.0.1`	network	healthy	`tests/test_base_url_hostname.py`
`5.15.146.1`	network	healthy	`tests/cli/test_gateway_wsl.py`
`1.2.3.4`	network	healthy	`tests/cli/test_runtime_provider_resolution.py`
`10.0.0.5`	network	healthy	`tests/cli/test_web_server_host_header.py`
`5.6.7.8`	network	healthy	`tests/agent/test_gemini_cloudcode.py`
`172.17.0.1`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.64.0.0`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.64.0.1`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.77.243.5`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.100.100.100`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.127.255.254`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.127.255.255`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.63.255.255`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.128.0.1`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`100.200.0.1`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`99.64.0.1`	network	healthy	`tests/agent/test_local_stream_timeout.py`
`192.168.1.22`	network	healthy	`tests/agent/test_model_metadata_local_ctx.py`
`192.168.1.1`	network	healthy	`tests/tools/test_browser_ssrf_local.py`
`10.0.0.1`	network	healthy	`tests/tools/test_cronjob_tools.py`
`172.16.0.1`	network	healthy	`tests/tools/test_url_safety.py`
`224.0.0.0`	network	healthy	`tests/tools/test_url_safety.py`
`224.0.0.251`	network	healthy	`tests/tools/test_url_safety.py`
`100.0.0.1`	network	healthy	`tests/tools/test_url_safety.py`
`198.18.0.23`	network	healthy	`tests/tools/test_url_safety.py`
`224.0.0.1`	network	healthy	`tests/tools/test_url_safety.py`
`255.255.255.255`	network	healthy	`tests/tools/test_url_safety.py`
`8.8.8.8`	network	healthy	`tests/tools/test_url_safety.py`
`1.1.1.1`	network	healthy	`tests/tools/test_url_safety.py`
`198.18.23.183`	network	healthy	`tests/tools/test_url_safety.py`
`169.254.170.2`	network	healthy	`tests/tools/test_url_safety.py`
`100.100.100.200`	network	healthy	`tests/tools/test_url_safety.py`
`169.254.169.253`	network	healthy	`tests/tools/test_url_safety.py`
`169.254.42.99`	network	healthy	`tests/tools/test_url_safety.py`
`149.154.166.110`	network	healthy	`tests/gateway/test_telegram_network.py`
`149.154.160.0`	network	healthy	`tests/gateway/test_telegram_network.py`
`149.154.167.220`	network	healthy	`tests/gateway/test_telegram_network.py`
`149.154.167.221`	network	healthy	`tests/gateway/test_telegram_network.py`
`149.154.167.010`	network	healthy	`tests/gateway/test_telegram_network.py`
`192.168.1.10`	network	healthy	`harness/cli/config.py`
`127.0.0.0`	network	healthy	`harness/agent/model_metadata.py`
`120.0.0.0`	network	healthy	`harness/tools/vision_tools.py`
`198.18.0.0`	network	healthy	`harness/tools/url_safety.py`
`169.254.0.0`	network	healthy	`harness/tools/url_safety.py`

Label	Layer	Status	Path
`schema_version`	data	healthy	`trading/lifecycle/db.py`
`data_point_snapshots`	data	healthy	`trading/lifecycle/db.py`
`strategies`	data	healthy	`trading/lifecycle/db.py`
`predictions`	data	healthy	`trading/lifecycle/db.py`
`support_scores`	data	healthy	`trading/lifecycle/db.py`
`prediction_evaluations`	data	healthy	`trading/lifecycle/db.py`
`theses`	data	healthy	`trading/lifecycle/db.py`
`decisions`	data	healthy	`trading/lifecycle/db.py`
`trades`	data	healthy	`trading/lifecycle/db.py`
`positions`	data	healthy	`trading/lifecycle/db.py`
`position_evaluations`	data	healthy	`trading/lifecycle/db.py`
`outcomes`	data	healthy	`trading/lifecycle/db.py`
`reflections`	data	healthy	`trading/lifecycle/db.py`
`observations`	data	healthy	`trading/lifecycle/db.py`
`capital_movements`	data	healthy	`trading/lifecycle/db.py`
`action_runs`	data	healthy	`trading/lifecycle/db.py`
`sessions`	data	healthy	`harness/state.py`
`messages`	data	healthy	`harness/state.py`
`state_meta`	data	healthy	`harness/state.py`
`responses`	data	healthy	`harness/gateway/platforms/api_server.py`
`conversations`	data	healthy	`harness/gateway/platforms/api_server.py`

Label	Layer	Status	Path
`generic_api_key::tests/cli/test_runtime_provider_resolution…`	security	healthy	`tests/cli/test_runtime_provider_resolution.py`
`generic_api_key::tests/cli/test_runtime_provider_resolution…`	security	healthy	`tests/cli/test_runtime_provider_resolution.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_run_agent.py`	security	healthy	`tests/run_agent/test_run_agent.py`
`generic_api_key::tests/run_agent/test_primary_runtime_resto…`	security	healthy	`tests/run_agent/test_primary_runtime_restore.py`
`password_literal::tests/tools/test_terminal_tool.py`	security	healthy	`tests/tools/test_terminal_tool.py`
`github_token::tests/tools/test_mcp_tool.py`	security	healthy	`tests/tools/test_mcp_tool.py`
`password_literal::harness/tools/terminal_tool.py`	security	healthy	`harness/tools/terminal_tool.py`

Label	Layer	Status	Path
`port:9223`	network	healthy	`tests/tools/test_browser_cdp_override.py`
`port:2222`	network	healthy	`tests/tools/test_ssh_bulk_upload.py`
`port:22`	network	healthy	`tests/tools/test_ssh_environment.py`
`port:23`	network	healthy	`tests/tools/test_ssh_environment.py`
`port:9222`	network	healthy	`harness/repl.py`
`port:9377`	network	healthy	`harness/cli/tools_config.py`
`port:8644`	network	healthy	`harness/cli/webhook.py`

Label	Layer	Status	Path
`sqlite`	data	healthy	`README.md`
`postgres`	data	healthy	`tests/agent/test_redact.py`
`mysql`	data	healthy	`harness/agent/redact.py`
`mongodb`	data	healthy	`harness/agent/redact.py`
`redis`	data	healthy	`harness/agent/redact.py`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`tests/conftest.py`
`vps::ec2`	hardware	healthy	`tests/conftest.py`
`vps::gcp`	hardware	healthy	`tests/tools/test_url_safety.py`
`vps::azure`	hardware	healthy	`tests/tools/test_url_safety.py`
`vps::digitalocean`	hardware	healthy	`harness/agent/redact.py`

Label	Layer	Status	Path
`nginx`	network	healthy	`tests/agent/test_rate_limit_tracker.py`
`caddy`	network	healthy	`harness/cli/config.py`
`loadbalancer`	network	healthy	`harness/agent/error_classifier.py`

Label	Layer	Status	Path
`k8s::backend::harness/plugins/image_gen/openai/plugin.yaml`	hardware	healthy	`harness/plugins/image_gen/openai/plugin.yaml`
`k8s::backend::harness/plugins/image_gen/xai/plugin.yaml`	hardware	healthy	`harness/plugins/image_gen/xai/plugin.yaml`
`k8s::backend::harness/plugins/image_gen/openai-codex/plugin…`	hardware	healthy	`harness/plugins/image_gen/openai-codex/plugin.yaml`

Label	Layer	Status	Path
`scan`	cicd	healthy	`.github/workflows/supply-chain-audit.yml`
`test`	cicd	healthy	`.github/workflows/tests.yml`
`e2e`	cicd	healthy	`.github/workflows/tests.yml`

Label	Layer	Status	Path
`gha::supply-chain-audit`	cicd	healthy	`.github/workflows/supply-chain-audit.yml`
`gha::tests`	cicd	healthy	`.github/workflows/tests.yml`

Label	Layer	Status	Path
`repobility-clone-2rvpp20y`	software	healthy	`/tmp/repobility-clone-2rvpp20y`

Label	Layer	Status	Path
`test_setup_openclaw_migration.py`	data	healthy	`tests/cli/test_setup_openclaw_migration.py`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`tests/cli/test_models.py`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/0f54f343-b0d6-4b10-87cd-63f4c1eeff4b/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/0f54f343-b0d6-4b10-87cd-63f4c1eeff4b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

sevnightingale/plutus-agent

Complete repo analysis

function 50+

class 50+

file 50+

directory 50+

endpoint 50+

auth 50+

service 46

table 21

secret 14

port 7

database 5

vps 5

load_balancer 3

container 3

job 3

pipeline 2

repo 1

migration 1

gpu 1

env_var 1