Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

websentry-ai/setup

https://github.com/websentry-ai/setup · scanned 2026-06-16 00:56 UTC (2 months, 1 week ago)

94 raw signals (0 security + 94 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 65 actionable findings from 1 signal source. 29 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 65 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 18 Low 32 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 65 Crowd 0 Layer: Software 3 Hardware 2 Frontend 1 Security 2 Cicd 3 Quality 54

Exclude dismissed / FP Exclude test files

All 1144 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`debug_print`	software	healthy	`openclaw/setup.py:25`
`install_macos_certificates`	software	healthy	`openclaw/setup.py:30`
`normalize_url`	software	healthy	`openclaw/setup.py:39`
`get_shell_rc_file`	software	healthy	`openclaw/setup.py:48`
`append_to_file`	software	healthy	`openclaw/setup.py:62`
`set_env_var_windows`	software	healthy	`openclaw/setup.py:86`
`set_env_var_unix`	software	healthy	`openclaw/setup.py:95`
`set_env_var`	software	healthy	`openclaw/setup.py:103`
`remove_env_var_unix`	software	healthy	`openclaw/setup.py:118`
`remove_env_var_windows`	software	healthy	`openclaw/setup.py:140`
`remove_env_var`	software	healthy	`openclaw/setup.py:162`
`run_callback_server`	software	healthy	`openclaw/setup.py:174`
`_finish`	software	healthy	`openclaw/setup.py:180`
`do_GET`	software	dead	`openclaw/setup.py:190`
`log_message`	software	dead	`openclaw/setup.py:202`
`configure_openclaw`	software	healthy	`openclaw/setup.py:243`
`_report_status`	software	healthy	`openclaw/setup.py:364`
`clear_setup`	software	healthy	`openclaw/setup.py:374`
`notify_setup_complete`	software	healthy	`openclaw/setup.py:468`
`main`	software	healthy	`openclaw/setup.py:487`
`check_admin_privileges`	software	healthy	`mdm/onboard.py:106`
`fetch_script`	software	healthy	`mdm/onboard.py:117`
`run_tool`	software	healthy	`mdm/onboard.py:134`
`_terminate_discovery_tree`	software	healthy	`mdm/onboard.py:171`
`_signal_group`	software	healthy	`mdm/onboard.py:199`
`run_discovery`	software	healthy	`mdm/onboard.py:230`
`parse_args`	software	healthy	`mdm/onboard.py:290`
`main`	software	healthy	`mdm/onboard.py:321`
`debug_print`	software	healthy	`gemini-cli/gateway/setup.py:26`
`normalize_url`	software	healthy	`gemini-cli/gateway/setup.py:32`
`get_shell_rc_file`	software	healthy	`gemini-cli/gateway/setup.py:43`
`append_to_file`	software	healthy	`gemini-cli/gateway/setup.py:75`
`set_env_var_on_windows`	software	healthy	`gemini-cli/gateway/setup.py:103`
`set_env_var_on_unix`	software	healthy	`gemini-cli/gateway/setup.py:128`
`set_env_var`	software	healthy	`gemini-cli/gateway/setup.py:154`
`remove_env_var_on_unix`	software	healthy	`gemini-cli/gateway/setup.py:188`
`remove_env_var_on_windows`	software	healthy	`gemini-cli/gateway/setup.py:220`
`remove_env_var`	software	healthy	`gemini-cli/gateway/setup.py:246`
`run_one_shot_callback_server`	software	healthy	`gemini-cli/gateway/setup.py:261`
`_finish`	software	healthy	`gemini-cli/gateway/setup.py:270`
`do_GET`	software	dead	`gemini-cli/gateway/setup.py:280`
`do_POST`	software	dead	`gemini-cli/gateway/setup.py:290`
`log_message`	software	dead	`gemini-cli/gateway/setup.py:302`
`write_unbound_config`	software	healthy	`gemini-cli/gateway/setup.py:340`
`clear_setup`	software	healthy	`gemini-cli/gateway/setup.py:367`
`get_device_identifier`	software	healthy	`gemini-cli/gateway/setup.py:394`
`detect_install_state`	software	healthy	`gemini-cli/gateway/setup.py:494`
`notify_setup_complete`	software	healthy	`gemini-cli/gateway/setup.py:507`
`main`	software	healthy	`gemini-cli/gateway/setup.py:531`
`debug_print`	software	healthy	`gemini-cli/gateway/mdm/setup.py:20`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`setup.py`	software	healthy	`openclaw/setup.py`
`README.md`	software	healthy	`mdm/README.md`
`onboard.py`	software	healthy	`mdm/onboard.py`
`README.md`	software	healthy	`gemini-cli/gateway/README.md`
`setup.py`	software	healthy	`gemini-cli/gateway/setup.py`
`README.md`	software	healthy	`gemini-cli/gateway/mdm/README.md`
`setup.py`	software	healthy	`gemini-cli/gateway/mdm/setup.py`
`devcontainer-feature.json`	software	healthy	`devcontainer-feature/src/unbound-hooks/devcontainer-feature…`
`install.sh`	software	healthy	`devcontainer-feature/src/unbound-hooks/install.sh`
`managed-settings.json`	software	healthy	`devcontainer-feature/src/unbound-hooks/managed-settings.json`
`link-unbound.sh`	software	healthy	`devcontainer-feature/src/unbound-hooks/link-unbound.sh`
`build-spike.sh`	software	healthy	`binary/build-spike.sh`
`README.md`	software	healthy	`binary/README.md`
`build.sh`	software	healthy	`binary/build.sh`
`SPIKE.md`	software	healthy	`binary/SPIKE.md`
`conftest.py`	software	healthy	`binary/tests/conftest.py`
`test_frozen_contract.py`	software	healthy	`binary/tests/test_frozen_contract.py`
`test_setup_migration.py`	software	healthy	`binary/tests/test_setup_migration.py`
`test_hook_cli.py`	software	healthy	`binary/tests/test_hook_cli.py`
`entry.py`	software	healthy	`binary/src/entry.py`
`setup_cmd.py`	software	healthy	`binary/src/unbound_hook/setup_cmd.py`
`__init__.py`	software	healthy	`binary/src/unbound_hook/__init__.py`
`_loader.py`	software	healthy	`binary/src/unbound_hook/_loader.py`
`backfill_cmd.py`	software	healthy	`binary/src/unbound_hook/backfill_cmd.py`
`_resources.py`	software	healthy	`binary/src/unbound_hook/_resources.py`
`clear_cmd.py`	software	healthy	`binary/src/unbound_hook/clear_cmd.py`
`hook_cmd.py`	software	healthy	`binary/src/unbound_hook/hook_cmd.py`
`main.py`	software	healthy	`binary/src/unbound_hook/main.py`
`migration.py`	software	healthy	`binary/src/unbound_hook/migration.py`
`README.md`	software	healthy	`codex/hooks/README.md`
`test_identity.py`	software	healthy	`codex/hooks/test_identity.py`
`unbound.py`	software	healthy	`codex/hooks/unbound.py`
`setup.py`	software	healthy	`codex/hooks/setup.py`
`README.md`	software	healthy	`codex/hooks/mdm/README.md`
`setup.py`	software	healthy	`codex/hooks/mdm/setup.py`
`README.md`	software	healthy	`codex/gateway/README.md`
`setup.py`	software	healthy	`codex/gateway/setup.py`
`README.md`	software	healthy	`codex/gateway/mdm/README.md`
`setup.py`	software	healthy	`codex/gateway/mdm/setup.py`
`README.md`	software	healthy	`cursor/README.md`
`hooks.json`	software	healthy	`cursor/hooks.json`
`test_identity.py`	software	healthy	`cursor/test_identity.py`
`unbound.py`	software	healthy	`cursor/unbound.py`
`setup.py`	software	healthy	`cursor/setup.py`
`README.md`	software	healthy	`cursor/mdm/README.md`
`setup.py`	software	healthy	`cursor/mdm/setup.py`
`managed-settings.json`	software	healthy	`container-addon/managed-settings.json`
`Dockerfile`	software	healthy	`container-addon/Dockerfile`
`link-unbound.sh`	software	healthy	`container-addon/link-unbound.sh`
`unbound_discovery_entry.py`	software	healthy	`packaging/unbound_discovery_entry.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`openclaw`	software	healthy	`openclaw`
`mdm`	software	healthy	`mdm`
`gemini-cli`	software	healthy	`gemini-cli`
`gateway`	software	healthy	`gemini-cli/gateway`
`mdm`	software	healthy	`gemini-cli/gateway/mdm`
`devcontainer-feature`	software	healthy	`devcontainer-feature`
`src`	software	healthy	`devcontainer-feature/src`
`unbound-hooks`	software	healthy	`devcontainer-feature/src/unbound-hooks`
`binary`	software	healthy	`binary`
`tests`	software	healthy	`binary/tests`
`src`	software	healthy	`binary/src`
`unbound_hook`	software	healthy	`binary/src/unbound_hook`
`codex`	software	healthy	`codex`
`hooks`	software	healthy	`codex/hooks`
`mdm`	software	healthy	`codex/hooks/mdm`
`gateway`	software	healthy	`codex/gateway`
`mdm`	software	healthy	`codex/gateway/mdm`
`cursor`	software	healthy	`cursor`
`mdm`	software	healthy	`cursor/mdm`
`container-addon`	software	healthy	`container-addon`
`packaging`	software	healthy	`packaging`
`scripts`	software	healthy	`packaging/scripts`
`nuitka`	software	healthy	`packaging/nuitka`
`placeholder`	software	healthy	`packaging/placeholder`
`copilot`	software	healthy	`copilot`
`hooks`	software	healthy	`copilot/hooks`
`mdm`	software	healthy	`copilot/hooks/mdm`
`claude-code`	software	healthy	`claude-code`
`hooks`	software	healthy	`claude-code/hooks`
`mdm`	software	healthy	`claude-code/hooks/mdm`
`gateway`	software	healthy	`claude-code/gateway`
`mdm`	software	healthy	`claude-code/gateway/mdm`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`CallbackHandler`	software	healthy	`openclaw/setup.py:179`
`_CallbackServer`	software	healthy	`openclaw/setup.py:205`
`CallbackHandler`	software	healthy	`gemini-cli/gateway/setup.py:269`
`_Proc`	software	healthy	`binary/tests/test_frozen_contract.py:51`
`FakeModule`	software	healthy	`binary/tests/test_hook_cli.py:139`
`TestEmailDomain`	software	healthy	`codex/hooks/test_identity.py:46`
`TestDecodeJwtClaims`	software	healthy	`codex/hooks/test_identity.py:70`
`TestCodexOrgId`	software	healthy	`codex/hooks/test_identity.py:133`
`TestReadAccountIdentity`	software	healthy	`codex/hooks/test_identity.py:170`
`TestBuildAccountIdentity`	software	healthy	`codex/hooks/test_identity.py:282`
`CallbackHandler`	software	healthy	`codex/hooks/setup.py:224`
`_CallbackServer`	software	healthy	`codex/hooks/setup.py:252`
`CallbackHandler`	software	healthy	`codex/gateway/setup.py:269`
`TestEmailDomain`	software	healthy	`cursor/test_identity.py:27`
`TestCursorStateDbPath`	software	healthy	`cursor/test_identity.py:51`
`TestReadCursorItemTable`	software	healthy	`cursor/test_identity.py:111`
`TestBuildAccountIdentity`	software	healthy	`cursor/test_identity.py:157`
`CallbackHandler`	software	healthy	`cursor/setup.py:215`
`_CallbackServer`	software	healthy	`cursor/setup.py:239`
`CallbackHandler`	software	healthy	`copilot/hooks/setup.py:223`
`_CallbackServer`	software	healthy	`copilot/hooks/setup.py:247`
`TestEmailDomain`	software	healthy	`claude-code/hooks/test_identity.py:18`
`TestReadAccountIdentity`	software	healthy	`claude-code/hooks/test_identity.py:43`
`TestBuildAccountIdentity`	software	healthy	`claude-code/hooks/test_identity.py:207`
`CallbackHandler`	software	healthy	`claude-code/hooks/setup.py:221`
`_CallbackServer`	software	healthy	`claude-code/hooks/setup.py:249`
`TestCallbackHandler`	software	healthy	`claude-code/hooks/test_setup.py:16`
`TestMainErrorHandling`	software	healthy	`claude-code/hooks/test_setup.py:80`
`TestBackfillCutoffCache`	software	healthy	`claude-code/hooks/test_setup.py:142`
`TestMdmBackfillCutoff`	software	healthy	`claude-code/hooks/test_setup.py:222`
`TestMdmWriteConfigReportsSuccess`	software	healthy	`claude-code/hooks/test_setup.py:302`
`_Info`	software	healthy	`claude-code/hooks/mdm/test_repair_ownership.py:30`
`TestRepairUserOwnership`	software	healthy	`claude-code/hooks/mdm/test_repair_ownership.py:37`
`CallbackHandler`	software	healthy	`claude-code/gateway/setup.py:344`

Label	Layer	Status	Path
`APPLE_INSTALLER_SIGNING_IDENTITY`	cicd	healthy	`—`
`ARTIFACTS_AWS_ACCESS_KEY_ID`	cicd	healthy	`—`
`APPLE_NOTARY_KEY_ID`	cicd	healthy	`—`
`APPLE_CERT_APPLICATION_PASSWORD`	cicd	healthy	`—`
`ARTIFACTS_AWS_SECRET_ACCESS_KEY`	cicd	healthy	`—`
`APPLE_CERT_APPLICATION_P12`	cicd	healthy	`—`
`ARTIFACTS_REGION`	cicd	healthy	`—`
`APPLE_CERT_INSTALLER_PASSWORD`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`DEPLOY_AUTOMATION_SECRET`	cicd	healthy	`—`
`APPLE_NOTARY_ISSUER_ID`	cicd	healthy	`—`
`APPLE_TEAM_ID`	cicd	healthy	`—`
`DISCOVERY_CHECKOUT_TOKEN`	cicd	healthy	`—`
`APPLE_NOTARY_KEY_P8`	cicd	healthy	`—`
`APPLE_APP_SIGNING_IDENTITY`	cicd	healthy	`—`
`APPLE_CERT_INSTALLER_P12`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::publish-addon`	cicd	healthy	`.github/workflows/publish-addon.yml`
`gha::deploy-to-production`	cicd	healthy	`.github/workflows/deploy-to-production.yml`
`gha::sync-staging-with-main`	cicd	healthy	`.github/workflows/sync-staging-with-main.yml`
`gha::publish-feature`	cicd	healthy	`.github/workflows/publish-feature.yml`
`gha::static-checks`	cicd	healthy	`.github/workflows/static-checks.yml`
`gha::release-macos-runtime`	cicd	healthy	`.github/workflows/release-macos-runtime.yml`

Label	Layer	Status	Path
`build-and-push`	cicd	healthy	`.github/workflows/publish-addon.yml`
`deploy`	cicd	healthy	`.github/workflows/deploy-to-production.yml`
`sync-staging`	cicd	healthy	`.github/workflows/sync-staging-with-main.yml`
`publish`	cicd	healthy	`.github/workflows/publish-feature.yml`
`static-checks`	cicd	healthy	`.github/workflows/static-checks.yml`
`release`	cicd	healthy	`.github/workflows/release-macos-runtime.yml`

Label	Layer	Status	Path
`auth::openclaw/setup.py`	security	healthy	`openclaw/setup.py`
`auth::claude-code/hooks/unbound.py`	security	healthy	`claude-code/hooks/unbound.py`
`auth::codex/hooks/test_identity.py`	security	healthy	`codex/hooks/test_identity.py`

Label	Layer	Status	Path
`test_setup_migration.py`	data	healthy	`binary/tests/test_setup_migration.py`
`migration.py`	data	healthy	`binary/src/unbound_hook/migration.py`

Label	Layer	Status	Path
`repobility-clone-pzdzuhsq`	software	healthy	`/tmp/repobility-clone-pzdzuhsq`

Label	Layer	Status	Path
`sqlite`	data	healthy	`cursor/test_identity.py`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`openclaw/setup.py`

Label	Layer	Status	Path
`image::container-addon/Dockerfile`	hardware	healthy	`container-addon/Dockerfile`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`.github/workflows/release-macos-runtime.yml`

Label	Layer	Status	Path
`password_literal::.github/workflows/release-macos-runtime.y…`	security	healthy	`.github/workflows/release-macos-runtime.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/2117b4c0-df57-417f-b39c-f2f493764913/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/2117b4c0-df57-417f-b39c-f2f493764913/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

websentry-ai/setup

Complete repo analysis

function 50+

file 50+

directory 34

class 34

env_var 16

pipeline 6

job 6

auth 3

migration 2

repo 1

database 1

service 1

container 1

vps 1

secret 1