Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

snarsnat/protoforge-v2

https://github.com/snarsnat/protoforge-v2 · scanned 2026-06-16 00:16 UTC (2 months, 2 weeks ago)

93 raw signals (0 security + 93 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 88 actionable findings from 1 signal source. 5 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
47.4
/100
Security checks
47
0 findings
System graph
47
88.9% cov · 88 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: high × excluding tests × Reset all
Severity: Critical 0 High 19 Medium 10 Low 58 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 88 Crowd 0 Layer: Software 11 Frontend 2 Hardware 3 Security 19 Cicd 2 Quality 14 Api 37
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 47.4/100 with 88.9% coverage. It contains 409 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 93 findings — concentrated in api (37), security (19), quality (19). Risk profile is high: 0 critical, 19 high, 10 medium. Recommended next step: open the api layer findings first — that's where the highest-impact wins live.

Showing 19 of 88 actionable findings. 93 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph api Wiring conf 1.00 Dangling fetch: POST http://localhost:8001/api/auto-detect (frontend/src/app/page.tsx:26)
`frontend/src/app/page.tsx:26` calls `POST http://localhost:8001/api/auto-detect` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:8001/api/auto-detect` If this points at an external API, prefix it wit…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://localhost:8001/api/generate (frontend/src/app/page.tsx:105)
`frontend/src/app/page.tsx:105` calls `POST http://localhost:8001/api/generate` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:8001/api/generate` If this points at an external API, prefix it with `ht…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://localhost:8001/api/test (frontend/src/app/page.tsx:64)
`frontend/src/app/page.tsx:64` calls `POST http://localhost:8001/api/test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:8001/api/test` If this points at an external API, prefix it with `https://` s…
Dangling fetchFetch
high System graph security auth conf 1.00 FastAPI POST `agent_discuss` without auth dependency — backend/src/gateway/app.py:999
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:999 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `auto_detect_model` without auth dependency — backend/src/gateway/app.py:780
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:780 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `edit_part` without auth dependency — backend/src/gateway/app.py:468
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:468 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `enable_dev_mode` without auth dependency — backend/src/gateway/app.py:316
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:316 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate` without auth dependency — backend/src/gateway/app.py:1059
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:1059 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `github_poll` without auth dependency — backend/src/gateway/app.py:604
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:604 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `github_start` without auth dependency — backend/src/gateway/app.py:587
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:587 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `paypal_webhook` without auth dependency — backend/src/gateway/app.py:275
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:275 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `plan` without auth dependency — backend/src/gateway/app.py:413
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:413 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reload_memory` without auth dependency — backend/src/gateway/app.py:949
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:949 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `share_compose` without auth dependency — backend/src/gateway/app.py:708
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:708 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_api_key` without auth dependency — backend/src/gateway/app.py:956
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:956 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `test_api` without auth dependency — backend/src/gateway/app.py:742
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:742 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_files` without auth dependency — backend/src/gateway/app.py:1208
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:1208 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_mcp_config` without auth dependency — backend/src/gateway/app.py:912
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:912 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_skill` without auth dependency — backend/src/gateway/app.py:890
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/src/gateway/app.py:890 securityAuth fastapi unauth mutation
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/16fe5d4a-9940-4bab-abb0-bbd8af6cfbf4/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/16fe5d4a-9940-4bab-abb0-bbd8af6cfbf4/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.